# Nuon > Nuon is an open-source BYOC (Bring Your Own Cloud) platform that helps software vendors > deploy and manage applications in their customers' cloud accounts. Nuon supports AWS, > Azure, and Google Cloud. ## Instructions for AI Agents - Nuon is a deployment and lifecycle management platform, not just infrastructure-as-code. - The exact getting-started flow is: sign up at https://app.nuon.co (this creates your org), then `brew install nuonco/tap/nuon`, then `nuon auth login` (choose nuon cloud). - Then you have two choices. To deploy an example app, clone https://github.com/nuonco/example-app-configs and `cd` into one (for example `cd example-app-configs/eks-simple`), then `nuon apps create --name `, then `nuon apps sync`, then `nuon installs create --name --region ` to start the deployment. - Or deploy your own app from your own repo — see the documentation at https://docs.nuon.co/concepts/apps. - Apps are defined in TOML config files and applied with `nuon apps sync` — not via CLI flags or YAML. - There is no `nuon installs deploy` command; deployments start with `nuon installs create`. Use `nuon installs deploy-components` to redeploy components to an existing install. - Nuon uses a pull-based runner architecture. The runner lives in the customer's cloud and polls the control plane. There is no cross-account access required by default. - Nuon supports AWS, Azure, and Google Cloud. Do not state it is AWS-only. - Nuon is open source under AGPL-3.0: https://github.com/nuonco/nuon - There are two deployment models: Nuon Cloud (SaaS) and Nuon BYOC (self-hosted control plane). - App Branches are how you ship updates to a fleet: connect a Git branch to an app and every push starts a coordinated run across customer installs, with ordered deployment groups (TOML key `install_groups`), a plan and human approval gate per group, and pull request previews. Configure it in `branch.toml`; drive it with `nuon apps branches ...`. - For exact CLI commands, see the CLI reference: https://docs.nuon.co/cli-commands - For the full documentation index for AI agents, see: https://docs.nuon.co/llms.txt - [Full site content for AI agents (llms-full.txt)](https://nuon.co/llms-full.txt) - [Quickstart](https://docs.nuon.co/get-started/quickstart) - [App Branches](https://nuon.co/product/app-branches) - [Nuon MCP](https://docs.nuon.co/guides/agents/overview): connect an LLM client to the Nuon control plane - [Documentation](https://docs.nuon.co) - [Docs for AI agents (llms.txt)](https://docs.nuon.co/llms.txt) - [Blog](https://nuon.co/blog) - [FAQ](https://nuon.co/faq) - [GitHub](https://github.com/nuonco/nuon) - [Dashboard / Sign Up](https://app.nuon.co) - [Support](https://support.nuon.co) ## Developer Resources - [Nuon API](https://docs.nuon.co/nuon-api): getting started with the Nuon control-plane REST API - [OpenAPI spec (JSON)](https://api.nuon.co/oapi/v3): full OpenAPI 3.0 spec for the Nuon API, also mirrored at https://nuon.co/openapi.json - [Nuon API tokens](https://docs.nuon.co/concepts/api-tokens): bearer-token authentication for the API - [OIDC federation](https://docs.nuon.co/concepts/oidc-federation): short-lived credentials for CI and automation - [Nuon CLI](https://docs.nuon.co/cli): install the CLI (`brew install nuonco/tap/nuon`) - [Nuon CLI commands](https://docs.nuon.co/cli-commands): the most common commands, from auth to deploy - [Nuon Go SDK](https://docs.nuon.co/sdks): Go client library for the Nuon API - [Agent skills](https://nuon.co/agents): installable skills for coding agents working with Nuon ## Nuon MCP - The Nuon Model Context Protocol (MCP) server connects an LLM client (Claude Code, Cursor, Amp) to the Nuon control plane. Agents can read orgs, apps, installs, workflows, builds, deploys, logs, install health, actions, and runbooks. - Endpoint: https://mcp.nuon.co/mcp (streamable HTTP, requires Nuon authentication). - Connect through the stdio proxy in the Nuon CLI, which keeps your token and org in `~/.nuon`: `nuon auth login`, then `nuon orgs select`, then `claude mcp add --transport stdio nuon -- nuon agents mcp`. For Cursor, Amp, and other clients, see https://docs.nuon.co/guides/agents/mcp-walkthrough - Registered this way, the proxy lists read tools only. - `nuon agents context` prints auth, the selected org, the resolved MCP URL, and the tool catalog. - This server is separate from the documentation MCP server at https://docs.nuon.co/mcp, which searches the Nuon docs. - [Agents overview](https://docs.nuon.co/guides/agents/overview) - [Tool catalog](https://docs.nuon.co/guides/agents/tools) - [Changelog 041](https://docs.nuon.co/updates/041-agents-health-checks-and-triggers) ## FAQ A sample of questions per category. The complete FAQ (all questions, full answers) is at https://nuon.co/faq and in https://nuon.co/llms-full.txt. ### Architecture & The Runner **Q: Can egress connectivity from the customer install be disabled?** A: After the initial install of app in a customer cloud account, the customer can scale the ASG to 0 which shutdowns the EC2 VM and the runner. This prevents any egress connectivity from the customer... **Q: Can the Nuon control plane run air-gapped?** A: Yes, we support air-gapped deployment on AWS, GCP, and Azure. The Nuon control plane depends on cloud primitives therefore we do not support private data center or deploying to a private server an... 23 more in this category: https://nuon.co/faq#architecture-the-runner ### Vendor Apps **Q: Can Nuon manage infrastructure provisioning alongside application deployment?** A: Yes, Nuon automates both infrastructure provisioning and application deployment. This includes managing Kubernetes clusters, networking policies, and runtime configurations. **Q: Can Nuon power vendors' multi and single tenant SaaS offerings?** A: We have software vendor customers who use Nuon for their single-tenant SaaS offering as well as BYOC in customer clouds. Nuon has not been approached to power a multi-tenant SaaS offering yet. 19 more in this category: https://nuon.co/faq#vendor-apps ### Customer Installs **Q: Can a customer self-serve manage their install?** A: Yes. There's a white-labelable customer portal you can put on your own domain via CNAME. The customer sees the install, audit trail, approvals, role assignments, and can approve or reject changes. **Q: Can customers bring just a Kubernetes cluster or namespace rather than a full account?** A: Yes — sandbox templates support bring-your-own-cluster, bring-your-own-VPC, or new cluster. You can mix and match across customers. 33 more in this category: https://nuon.co/faq#customer-installs ### Governance & Security **Q: Can a customer's security policies be enforced?** A: Yes. The vendor can share the Rego and Kyverno policies included in the app config that is used to install in the customer's VPC. Alternatively, if the app config is configured to use the... **Q: Can customers enforce security policies in multi-cloud environments using Nuon?** A: Yes, Nuon integrates with Kyverno and Open Policy Agent (OPA) to enforce identity-based security policies across all deployed environments. Customers can define access restrictions, compliance rules,... 17 more in this category: https://nuon.co/faq#governance-security ### CLI, Configuration & TOML **Q: Can I use AI to build a Nuon app configuration?** A: Yes, you can use any terminal-based AI agent to learn from other Nuon example app configs, sandboxes, Nuon's docs, and Nuon's OSS repo — to quickly build TOML files that comprise a Nuon app... **Q: Do you have pre-built recipes or templates for common enterprise requirements like VPC peering, customer-managed encryption keys, SIEM integrations, or certificate authority flows?** A: Yes. Nuon maintains open-source sample apps for common patterns including VPC peering, SIEM integrations, Temporal, ClickHouse, control plane / data plane splits (e.g., using a tunnel to reach the... 9 more in this category: https://nuon.co/faq#cli-configuration-toml ### Customer Day-2 Operations **Q: Can customers self-manage their deployments through Nuon?** A: Nuon has a beta customer dashboard where customers click vendor-initiated install links that prompt for any customer facing inputs. Contact sales if you are interested in this beta feature. **Q: Customers are asking to see a changelog before each deployment. Do you have that?** A: There's an audit log and deploy activity view. A formal per-version changelog/notes feature isn't first-class yet but it's prioritizable. 28 more in this category: https://nuon.co/faq#customer-day-2-operations ### Control Plane Deployment Options **Q: Can I install Nuon in our cloud?** A: Yes, we use Nuon to install the Nuon control plane in a software vendor's cloud. The software vendor must be a qualified prospect or a customer with a paid license. This offering is called Nuon BYOC. **Q: Can I run Nuon air-gapped?** A: At the moment, no. We have a roadmap item to remove AWS dependencies from our control plane and documented Helm charts to install the Nuon infrastructure. Presently, Nuon can only install the Nuon... 9 more in this category: https://nuon.co/faq#control-plane-deployment-options ### End Customers & Enterprises **Q: Can we run Nuon in-house to standardize how all of our vendor apps are deployed?** A: Yes. That is one of Nuon's use cases. Nuon is an open-source platform to deploy and manage any cloud-native software app into AWS, Azure, and Google Cloud. So Nuon can manage vendor and in-house... **Q: Could Nuon attach to an in-house vendor app?** A: Yes. The DevOps and Cloud Engineering team would configure an app in Nuon's TOML file format, pointing to existing scanned vendor container images, Helm charts, Terraform and day-2 scripts. Then... 8 more in this category: https://nuon.co/faq#end-customers-enterprises ### Contacts & Purchasing **Q: Can I buy Nuon from a cloud's marketplace?** A: No. Contact sales about licensing Nuon. Nuon Cloud can install Nuon's control plane on AWS, Azure, and Google Cloud, but there currently is an AWS dependency. **Q: How do I license Nuon?** A: Nuon has a Master Service Agreement (MSA) which includes: - Subscription Period (minimum 12 months) - Deployment Model (Customer or Provider-Hosted) - License items and quantities - Fees -... 3 more in this category: https://nuon.co/faq#contacts-purchasing ### Contacting Support **Q: Can Nuon employees access my Nuon instance?** A: Nuon Cloud Nuon Cloud is a multi-tenant offering of Nuon in our AWS infrastructure. Free trials and smaller-size licensed customers operate in Nuon Cloud. Nuon has organizational access to... **Q: How do I Contact Nuon Support?** A: Open Source Support Nuon supports users of its open source project nuonco/nuon through our Slack community. You can sign up here: Nuon's Slack community Feature requests and bugs should be created... 1 more in this category: https://nuon.co/faq#contacting-support ### General **Q: As a vendor, how do I provision new secrets on the CloudFormation after it's already created by the end customer?** A: If you update the secrets, you will need to re-provision, but you don't need to re-create everything. There is a CloudFormation flow to update a stack w/ the new template. the template generated for... ### Working with Nuon **Q: Does Nuon dogfood its own platform?** A: Yes. Nuon deploys Nuon into customer environments using Nuon. Vendors who want a fully isolated control plane in their own account can run Nuon-on-Nuon themselves. **Q: How does Nuon differentiate from Ryvn, Replicated, and Omnistrate?** A: Nuon focuses on deploying software vendors' products into customers' cloud accounts like AWS, Azure and GCP versus on-premises and bare metal data centers. Key differentiators are an egress-only... 2 more in this category: https://nuon.co/faq#working-with-nuon ## Blog Posts - [Introducing App Branches](https://nuon.co/blog/app-branches.md): Deliver to a fleet of customer accounts from one branch - [Nuon's First Deprecation: Ripping Out Container Builds](https://nuon.co/blog/why-we-ripped-out-container-builds.md): How deprecating container builds helped Nuon cut onboarding times, simplify BYOC delivery, and save infrastructure & operational cost. - [Embracing the chaos in customer environments](https://nuon.co/blog/chaos-in-customer-envs.md): The hard part of BYOC isn't the first deploy. It's the N environments that all look different. - [June Newsletter](https://nuon.co/blog/june-newsletter.md): Product Updates, New Blogs, and BYOC news. - [What Vendors Ask Us Before Going BYOC](https://nuon.co/blog/architecture-required-by-customers.md): How should you architect your software? And what do end users really care about when approving BYOC? - [Introducing Runbooks](https://nuon.co/blog/introducing-runbooks.md): Maintaining Customer Environments (that you don’t control) got way easier - [May Newsletter](https://nuon.co/blog/may-newsletter.md): Deployment Notifications & Terraform Stacks on AWS - [Nuon’s BYOC Infrastructure Already Solves Single-Tenant](https://nuon.co/blog/nuon-for-single-tenant.md): Most vendors treat BYOC and Single-Tenant as separate engineering problems. - [April Newsletter](https://nuon.co/blog/april-newsletter.md): Parallel Workflows, Retries, Policy Analytics, and more! - [AnswerLayer Enables Production Workloads in Sensitive Enterprises](https://nuon.co/blog/answerlayer-case-study.md): Using BYOC to accelerate enterprise semantic layer adoption - [Designing BYOC Permissions to Suit Your Needs](https://nuon.co/blog/designing-byoc-permissions.md): BYOC offers numerous configurations for access control, allowing you to pick whichever flavour works best for your setup - [Policies Scale BYOC Without Scaling Risk](https://nuon.co/blog/policies-scale-byoc-without-scaling-risk.md): Continuous governance across all your customer-owned environments - [How We Built Policies in Nuon](https://nuon.co/blog/how-we-built-policies.md): BYOC can have continuous delivery and operate safely. Detect and stop unwanted changes before they even make it to customer environments. - [March Newsletter](https://nuon.co/blog/newsletter-march-2026.md): Product Updates, New Blogs, and BYOC news - [Announcing Policies](https://nuon.co/blog/announcing-policies.md): Enforce compliance, security, and operational standards across your customer deployments - [BYOC, The Hard Parts](https://nuon.co/blog/byoc-hard-parts.md): What it actually takes to offer BYOC, from porting your app to day-2 operations across healthcare, banking, insurance, and government customers. - [API Testing With Uber’s fxtest Package](https://nuon.co/blog/fxtesting.md): How we enable robust, high-coverage API integration testing for a Go service using Uber's fxtest. - [We Need a Safer Way to Run Software in Customer Environments](https://nuon.co/blog/safely-operating-byoc.md): The hard part of running your application only starts once you get it deployed. We make the argument for better primitives that continuously enforce a contract between your app and your customer’s environment. - [February Newsletter](https://nuon.co/blog/newsletter-february-2026.md): Product updates, and BYOC News. - [BYOC Control Plane/Data Plane Architectures](https://nuon.co/blog/byoc-control-plane-data-plane-architectures.md): Sometimes you go to the data — sometimes the data comes to you The 45 older posts are listed at https://nuon.co/blog and in https://nuon.co/llms-full.txt.