Can AI agents automate Spacelift?

Spacelift is automatable today through its GraphQL API. An account named example accepts POST requests at https://example.app.spacelift.io/graphql. Every request sends a JWT as Authorization Bearer. Spacelift lists three ways to obtain that token: an API key for long-term use, spacectl for temporary use, and a personal GitHub token. Secret-based API keys exchange an ID and secret for the JWT through the apiKeyUser mutation. API keys are billed as virtual users. OIDC-based API keys are the alternative that does not use a static secret. spacectl wraps the same GraphQL API. It can run in CI with SPACELIFT_API_KEY_ID and SPACELIFT_API_KEY_SECRET, and Spacelift says its ability to create or edit resources is limited. Spacelift hosts a remote MCP server at https://ACCOUNT.app.spacelift.io/mcp, or on ACCOUNT.app.us.spacelift.io for US accounts. Tools are discover, query, provider, mutate, and intent. Browser OAuth uses mcp:read and mcp:write. A spacectl-issued bearer token is the headless alternative. The docs say the old /intent/mcp path stays available until August 1, 2026. The pricing page says Spacelift is always free for small teams, with no credit card and no time limit. Self-hosted and on-premises options are on the Enterprise+ plan and on the homepage. Zapier, Make, Power Automate, and n8n were not assessed. Computer-use viability is unassessed. API and MCP each score 8. CLI scores 6. API is the best path because a secret-based API key exchanges for a JWT and calls GraphQL without an MCP client.

Best path today: api · Overall automatability: 8/10