--- title: Argo CD API Integration on Truto slug: argocd category: CI/CD canonical: "https://truto.one/integrations/detail/argocd/" --- # Argo CD API Integration on Truto **Category:** CI/CD **Status:** Beta ## Unified APIs ### Unified User Directory API - **Activities** — Activities are the actions performed by users in the source application. - **Me** — - **Organizations** — Organizations are the top level entity in the source application. Users are associated with an organization. - **Roles** — The Role object represents a role of a User. - **Users** — The User object represents a User. ## MCP-ready AI tools Truto exposes 115 tools for Argo CD that AI agents can call directly. - **list_all_argo_cd_accounts** — Returns the list of accounts. Returns: items. - **argo_cd_accounts_list_2** — Returns an account. Returns: capabilities, enabled, name, tokens. Required: name. - **get_single_argo_cd_account_by_id** — Returns an account. Returns: capabilities, enabled, name, tokens. Required: id. - **list_all_argo_cd_account_can_is** — Checks if the current account has permission to perform an action. Returns: value. Required: resource, action, subresource. - **update_a_argo_cd_account_password_by_id** — Updates an account's password to a new value. - **create_a_argo_cd_token** — Creates a token. Returns: token. Required: name. - **delete_a_argo_cd_token_by_id** — Deletes a token. Required: id, name. - **list_all_argo_cd_applications** — List returns list of applications. Returns: items, metadata. - **create_a_argo_cd_application** — Create creates an application. Returns: metadata, operation, spec, status. - **update_a_argo_cd_application_by_id** — Update updates an application. Returns: metadata, operation, spec, status. Required: id. - **get_single_argo_cd_application_by_id** — Get returns an application by name. Returns: metadata, operation, spec, status. Required: id. - **argo_cd_applications_update_2** — Patch patch an application. Returns: metadata, operation, spec, status. Required: name. - **delete_a_argo_cd_application_by_id** — Delete deletes an application. Returns: metadata, operation, spec, status. Required: id. - **argo_cd_applications_list_events** — Returns a list of event resources. Returns: items, metadata. Required: name. - **argo_cd_applications_list_logs** — Returns stream of log entries for the specified pod. Pod. Returns: error, result. Required: name. - **argo_cd_applications_partial_update** — Patch patch an application. Returns: metadata, operation, spec, status. Required: id. - **create_a_argo_cd_applications_manifests_with_file** — Returns application manifests using provided files to generate them. Returns: commands, manifests, namespace, revision, server, sourceType, verifyResult. - **list_all_argo_cd_application_server_side_diffs** — Performs server-side diff calculation using dry-run apply. Returns: items, modified. Required: app_name. - **list_all_argo_cd_application_managed_resources** — Returns list of managed resources. Returns: items. Required: application_name. - **list_all_argo_cd_application_resource_trees** — Returns resource tree. Returns: hosts, nodes, orphanedNodes, shardsCount. Required: application_name. - **argo_cd_application_resource_trees_list_2** — Watch returns stream of application resource tree. Returns: error, result. Required: application_name. - **list_all_argo_cd_application_links** — Returns the list of all application deep links. Returns: items. Required: name. - **list_all_argo_cd_application_manifests** — Returns application manifests. Returns: commands, manifests, namespace, revision, server, sourceType, verifyResult. Required: name. - **delete_a_argo_cd_application_operation_by_id** — Terminates the currently running operation. Required: name. - **list_all_argo_cd_application_pods** — Returns stream of log entries for the specified pod. Pod. Returns: error, result. Required: name, pod_name. - **list_all_argo_cd_application_resources** — Returns single application resource. Returns: manifest. Required: name. - **create_a_argo_cd_application_resource** — Patch single application resource. Returns: manifest. Required: name. - **delete_a_argo_cd_application_resource_by_id** — Deletes a single application resource. Returns: metadata, operation, spec, status. Required: name. - **list_all_argo_cd_resource_actions** — Returns list of resource actions. Returns: actions. Required: name. - **create_a_argo_cd_resource_action** — Runs a resource action. Returns: metadata, operation, spec, status. Required: name. - **argo_cd_resource_actions_create_2** — Runs a resource action with parameters. Returns: metadata, operation, spec, status. Required: name. - **list_all_argo_cd_resource_links** — Returns the list of all resource deep links. Returns: items. Required: name. - **list_all_argo_cd_revision_chartdetails** — Get the chart metadata (description, maintainers, home) for a specific revision of the application. Returns: description, home, maintainers. Required: name, revision. - **list_all_argo_cd_metadata** — Get the meta-data (author, date, tags, message) for a specific revision of the application. Returns: author, date, message, references, signatureInfo, tags. Required: name, revision. - **list_all_argo_cd_revision_ocimetadatas** — Get the chart metadata (description, maintainers, home) for a specific revision of the application. Returns: authors, createdAt, description, docsUrl, imageUrl, sourceUrl, version. Required: name, revision. - **create_a_argo_cd_application_rollback** — Rollback syncs an application to its target state. Returns: metadata, operation, spec, status. Required: name. - **update_a_argo_cd_application_spec_by_id** — Updates an application spec. Returns: destination, ignoreDifferences, info, project, revisionHistoryLimit, source, sourceHydrator, sources. Required: name. - **create_a_argo_cd_application_sync** — Sync syncs an application to its target state. Returns: metadata, operation, spec, status. Required: name. - **list_all_argo_cd_application_syncwindows** — Get returns sync windows of the application. Returns: activeWindows, assignedWindows, canSync. Required: name. - **list_all_argo_cd_applicationsets** — List returns list of applicationset. Returns: items, metadata. - **create_a_argo_cd_applicationset** — Create creates an applicationset. Returns: metadata, spec, status. - **get_single_argo_cd_applicationset_by_id** — Get returns an applicationset by name. Returns: metadata, spec, status. Required: id. - **delete_a_argo_cd_applicationset_by_id** — Delete deletes an application set. Returns: applicationset, project. Required: id. - **argo_cd_applicationsets_list_events** — Returns a list of event resources. Returns: items, metadata. Required: name. - **create_a_argo_cd_applicationsets_generate** — Generate generates. Returns: applications. - **list_all_argo_cd_applicationset_resource_trees** — Returns resource tree. Returns: nodes. Required: name. - **list_all_argo_cd_certificates** — List all available repository certificates. Returns: items, metadata. - **create_a_argo_cd_certificate** — Creates repository certificates on the server. Returns: items, metadata. - **delete_a_argo_cd_certificate_by_id** — Delete the certificates that match the RepositoryCertificateQuery. Returns: items, metadata. - **list_all_argo_cd_clusters** — List returns list of clusters. Returns: items, metadata. - **create_a_argo_cd_cluster** — Create creates a cluster. Returns: annotations, clusterResources, config, connectionState, info, labels, name, namespaces. - **get_single_argo_cd_cluster_by_id** — Get returns a cluster by server address. Returns: annotations, clusterResources, config, connectionState, info, labels, name, namespaces. Required: id. - **update_a_argo_cd_cluster_by_id** — Update updates a cluster. Returns: annotations, clusterResources, config, connectionState, info, labels, name, namespaces. Required: id. - **delete_a_argo_cd_cluster_by_id** — Delete deletes a cluster. Required: id. - **create_a_argo_cd_cluster_invalidate_cach** — Invalidates cluster cache. Returns: annotations, clusterResources, config, connectionState, info, labels, name, namespaces. Required: id.value. - **create_a_argo_cd_cluster_rotate_auth** — Rotates the bearer token used for a cluster. Required: id.value. - **list_all_argo_cd_gpgkeys** — List all available repository certificates. Returns: items, metadata. - **create_a_argo_cd_gpgkey** — Create one or more GPG public keys in the server's configuration. Returns: created, skipped. - **delete_a_argo_cd_gpgkey_by_id** — Delete specified GPG public key from the server's configuration. - **get_single_argo_cd_gpgkey_by_id** — Get information about specified GPG public key from the server. Returns: fingerprint, keyData, keyID, owner, subType, trust. Required: id. - **list_all_argo_cd_notifications_services** — List returns list of services. Returns: items. - **list_all_argo_cd_notifications_templates** — List returns list of templates. Returns: items. - **list_all_argo_cd_notifications_triggers** — List returns list of triggers. Returns: items. - **list_all_argo_cd_projects** — List returns list of projects. Returns: items, metadata. - **create_a_argo_cd_project** — Create a new project. Returns: metadata, spec, status. - **get_single_argo_cd_project_by_id** — Get returns a project by name. Returns: metadata, spec, status. Required: id. - **delete_a_argo_cd_project_by_id** — Delete deletes a project. Required: id. - **argo_cd_projects_list_events** — Returns a list of project events. Returns: items, metadata. Required: name. - **update_a_argo_cd_project_by_id** — Update updates a project. Returns: metadata, spec, status. Required: id. - **list_all_argo_cd_project_detaileds** — Returns a project that include project, global project and scoped resources by name. Returns: clusters, globalProjects, project, repositories. Required: name. - **list_all_argo_cd_project_globalprojects** — Get returns a virtual project by name. Returns: items. Required: name. - **list_all_argo_cd_project_links** — Returns all deep links for the particular project. Returns: items. Required: name. - **list_all_argo_cd_project_syncwindows** — Returns true if there are any active sync syncWindows. Returns: windows. Required: name. - **create_a_argo_cd_role_token** — Create a new project token. Returns: token. Required: project, role. - **delete_a_argo_cd_role_token_by_id** — Delete a new project token. Required: id, project, role. - **list_all_argo_cd_repocreds** — Gets a list of all configured repository credential sets. Returns: items, metadata. - **create_a_argo_cd_repocred** — Creates a new repository credential set. Returns: bearerToken, enableOCI, forceHttpBasicAuth, gcpServiceAccountKey, githubAppEnterpriseBaseUrl, githubAppID, githubAppInstallationID, githubAppPrivateKey. - **update_a_argo_cd_repocred_by_id** — Updates a repository credential set. Returns: bearerToken, enableOCI, forceHttpBasicAuth, gcpServiceAccountKey, githubAppEnterpriseBaseUrl, githubAppID, githubAppInstallationID, githubAppPrivateKey. Required: id. - **delete_a_argo_cd_repocred_by_id** — Deletes a repository credential set from the configuration. Required: id. - **list_all_argo_cd_repositories** — Gets a list of all configured repositories. Returns: items, metadata. - **create_a_argo_cd_repository** — Creates a new repository configuration. Returns: bearerToken, connectionState, depth, enableLfs, enableOCI, forceHttpBasicAuth, gcpServiceAccountKey, githubAppEnterpriseBaseUrl. - **update_a_argo_cd_repository_by_id** — Updates a repository configuration. Returns: bearerToken, connectionState, depth, enableLfs, enableOCI, forceHttpBasicAuth, gcpServiceAccountKey, githubAppEnterpriseBaseUrl. Required: id. - **get_single_argo_cd_repository_by_id** — Get returns a repository or its credentials. Returns: bearerToken, connectionState, depth, enableLfs, enableOCI, forceHttpBasicAuth, gcpServiceAccountKey, githubAppEnterpriseBaseUrl. Required: id. - **delete_a_argo_cd_repository_by_id** — Deletes a repository from the configuration. Required: id. - **list_all_argo_cd_repositorie_apps** — Returns list of apps in the repo. Returns: items. Required: repo. - **list_all_argo_cd_repositorie_helmcharts** — Returns list of helm charts in the specified repository. Returns: items. Required: repo. - **list_all_argo_cd_repositorie_oci_tags** — List OCI Tags. Returns: branches, tags. Required: repo. - **list_all_argo_cd_repositorie_refs** — List Refs. Returns: branches, tags. Required: repo. - **create_a_argo_cd_repositorie_validate** — Validates access to a repository with given parameters. Required: repo. - **create_a_argo_cd_repositorie_appdetail** — Returns application details by given path. Returns: directory, helm, kustomize, plugin, type. Required: source.repo_url. - **create_a_argo_cd_session** — Create a new JWT for authentication and set a cookie if using HTTP. Returns: token. - **delete_a_argo_cd_session_by_id** — Delete an existing JWT cookie if using HTTP. Returns: token. - **list_all_argo_cd_session_userinfos** — Get the current user's info. Returns: groups, iss, loggedIn, username. - **list_all_argo_cd_settings** — Get returns Argo CD settings. Returns: additionalUrls, appLabelKey, appsInAnyNamespaceEnabled, configManagementPlugins, controllerNamespace, dexConfig, execEnabled, googleAnalytics. - **list_all_argo_cd_settings_plugins** — Get returns Argo CD plugins. Returns: plugins. - **list_all_argo_cd_stream_applications** — Watch returns stream of application change events. Returns: error, result. - **list_all_argo_cd_stream_applicationsets** — Watch. Returns: error, result. - **list_all_argo_cd_write_repocreds** — Gets a list of all configured repository credential sets that have write access. Returns: items, metadata. - **create_a_argo_cd_write_repocred** — Creates a new repository credential set with write access. Returns: bearerToken, enableOCI, forceHttpBasicAuth, gcpServiceAccountKey, githubAppEnterpriseBaseUrl, githubAppID, githubAppInstallationID, githubAppPrivateKey. - **update_a_argo_cd_write_repocred_by_id** — Updates a repository credential set with write access. Returns: bearerToken, enableOCI, forceHttpBasicAuth, gcpServiceAccountKey, githubAppEnterpriseBaseUrl, githubAppID, githubAppInstallationID, githubAppPrivateKey. Required: id. - **delete_a_argo_cd_write_repocred_by_id** — Deletes a repository credential set with write access from the configuration. Required: id. - **list_all_argo_cd_write_repositories** — Gets a list of all configured write repositories. Returns: items, metadata. - **create_a_argo_cd_write_repository** — Creates a new write repository configuration. Returns: bearerToken, connectionState, depth, enableLfs, enableOCI, forceHttpBasicAuth, gcpServiceAccountKey, githubAppEnterpriseBaseUrl. - **update_a_argo_cd_write_repository_by_id** — Updates a write repository configuration. Returns: bearerToken, connectionState, depth, enableLfs, enableOCI, forceHttpBasicAuth, gcpServiceAccountKey, githubAppEnterpriseBaseUrl. Required: id. - **argo_cd_write_repositories_list_2** — Returns a repository or its write credentials. Returns: bearerToken, connectionState, depth, enableLfs, enableOCI, forceHttpBasicAuth, gcpServiceAccountKey, githubAppEnterpriseBaseUrl. Required: repo. - **delete_a_argo_cd_write_repository_by_id** — Deletes a write repository from the configuration. Required: id. - **get_single_argo_cd_write_repository_by_id** — Returns a repository or its write credentials. Returns: bearerToken, connectionState, depth, enableLfs, enableOCI, forceHttpBasicAuth, gcpServiceAccountKey, githubAppEnterpriseBaseUrl. Required: id. - **create_a_argo_cd_write_repositorie_validate** — Validates write access to a repository with given parameters. Required: repo. - **list_all_argo_cd_versions** — Version returns version information of the API server. Returns: BuildDate, Compiler, ExtraBuildInfo, GitCommit, GitTag, GitTreeState, GoVersion, HelmVersion. - **list_all_argo_cd_application_events** — Returns a list of event resources. Returns: items, metadata. Required: name. - **list_all_argo_cd_application_logs** — Returns stream of log entries for the specified pod. Pod. Returns: error, result. Required: name. - **list_all_argo_cd_stream_application_resource_trees** — Watch returns stream of application resource tree. Returns: error, result. Required: application_name. - **create_a_argo_cd_resource_actions_v_2** — Runs a resource action with parameters. Returns: metadata, operation, spec, status. Required: name. - **list_all_argo_cd_applicationset_events** — Returns a list of event resources. Returns: items, metadata. Required: name. - **list_all_argo_cd_project_events** — Returns a list of project events. Returns: items, metadata. Required: name. ## How it works 1. **Link your customer's Argo CD account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Argo CD.** The Proxy API is a 1-to-1 mapping of the Argo CD API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Embed GitOps deployment visibility in developer portals** — Internal developer platforms can surface Argo CD application health, sync status, and pod-level logs to developers without giving them direct cluster access. Truto handles the auth and API surface so you can ship the portal experience faster. - **Power DORA metrics and deployment analytics** — Engineering analytics SaaS products can ingest Argo CD application events and sync history to compute Deployment Frequency, Lead Time for Changes, and MTTR. Truto normalizes the connection layer so you can focus on correlating deploys with commits and incidents. - **Orchestrate progressive delivery from CI/CD tooling** — Pipeline and release orchestration tools can trigger Argo CD syncs, poll application health until Healthy, and gate downstream stages like integration tests or promotion. This lets your customers wire GitOps deployments into broader automated release flows. - **Automate incident remediation and rollbacks** — AIOps and incident management platforms can detect anomalies post-deploy and programmatically roll Argo CD applications back to the last known-good revision. Your users get one-click or fully automated mitigation directly from their incident tooling. - **Enforce drift and security posture monitoring** — Security and FinOps platforms can watch Argo CD applications for out-of-sync state, inspect managed resources, and map projects/clusters back to tenants for cost or compliance attribution. Truto gives you a stable API to build these monitoring loops on top of. ## What you can build - **Live deployment status dashboard** — Render real-time sync and health status for every Argo CD application scoped to a team, project, or cluster using the applications and resource tree endpoints. - **One-click rollback from your UI** — Expose a rollback action that calls Argo CD's rollback endpoint against a chosen previous revision, complete with revision metadata for context. - **Streaming pod logs and events viewer** — Pull application logs, events, and pod lists to give users a debugging surface inside your product when a deployment goes sideways. - **Programmatic sync triggers for pipelines** — Kick off Argo CD application syncs from your CI/CD tool after a build passes, then poll application state until it becomes Healthy before advancing. - **Ephemeral environment provisioning** — Create Argo CD applications or ApplicationSets on demand for PR-review environments and clean them up automatically when the branch closes. - **Deployment event stream for analytics** — Consume application, applicationset, and project events to build a normalized deployment timeline for DORA metrics, audit logs, or changelog features. ## FAQs ### How does authentication to a customer's Argo CD instance work? Argo CD uses session-based auth or API tokens issued per account. Through Truto, your end users connect their Argo CD instance and Truto manages token creation, storage, and refresh via the session and token endpoints so you never handle credentials directly. ### Can we support both self-hosted and managed Argo CD deployments? Yes. Argo CD is almost always self-hosted inside a customer's Kubernetes cluster, so connections are made against the customer-provided API server URL. Truto's connection flow captures the base URL and credentials at connect time. ### What Argo CD resources can we read and write? The available tools cover applications, applicationsets, projects, clusters, repositories, repo credentials, certificates, GPG keys, sessions, tokens, notifications, settings, and versions — including reads for events, logs, resource trees, managed resources, manifests, pods, and revision metadata, plus writes for sync, rollback, spec updates, and resource actions. ### How fresh is the data — do you support streaming? Argo CD exposes streaming endpoints for applications, applicationsets, and application resource trees, which Truto surfaces so you can react to sync and health changes in near real time rather than polling on a fixed interval. ### Can we trigger deployments and rollbacks, not just read state? Yes. Write actions include creating application syncs, rollbacks, spec updates, resource actions, and creating or deleting applications and applicationsets, which covers the full deploy/remediate lifecycle. ### How are users and permissions modeled across connected accounts? Argo CD account and role information is available via the account and role token endpoints, and Truto's Unified User Directory API lets you normalize users, roles, and organizations across Argo CD and other connected tools in your product.