Skip to main content
Archal runs in any CI environment. Set the auth token, pick an output format, set a pass threshold. The build fails if satisfaction drops below it. Run npx archal init locally first, then commit .archal.json, your harness, and the archal devDependency. CI should use the project-pinned CLI with npx archal.

Secrets

The only required secret is your Archal token. For CI and any other non-interactive environment, use a workspace API key (archal_ws_...) set as ARCHAL_TOKEN:
If your harness calls a model provider directly, pass the provider key it reads:

Creating an API key

Create a workspace API key with archal workspace api-key create ci-runner from a logged-in owner/admin session, or from the dashboard: Settings > API Keys. Copy it once and store it as a CI secret. List or revoke keys with archal workspace api-keys and archal workspace api-key revoke <key-id>. Browser login (archal login) also authenticates the CLI, but its session token is short lived, so prefer an API key for CI. See archal workspace. A workspace API key is already bound to one workspace. If you use a user token and belong to more than one workspace, set ARCHAL_WORKSPACE_ID to target a specific one:

GitHub Actions

GitLab CI

Useful flags

Exit codes

Go deeper

Run multiple scenarios

List scenario paths in the scenarios array of .archal.json. archal run executes each one: