Skip to content
Soup

Soup Cloud

Soup Cloud is the hosted version of Soup at app.getsoup.dev.

Cloud vs Self-Hosted

Section titled “Cloud vs Self-Hosted”
FeatureSelf-HostedCloud
SetupDeploy yourselfAlready running
UpdatesManualAutomatic
TeamsManual setupBuilt-in orgs
AuthAPI keysGitHub OAuth
HostingYour infrastructureManaged
CostFree (DIY)Free tier + $5/user

What You Get

Section titled “What You Get”

Multi-User Access

Section titled “Multi-User Access”

GitHub OAuth for team authentication. Invite team members to organizations with roles:

  • Owner: Full access, billing
  • Admin: Manage members, projects
  • Member: View/edit based on permissions

Organizations

Section titled “Organizations”
  • Personal org: Created automatically with your account
  • Team orgs: Create orgs, invite colleagues

Multi-Tenancy

Section titled “Multi-Tenancy”

Each organization gets its own isolated database. Your data stays separate from other customers.

Modules Included

Section titled “Modules Included”

All live modules included at no extra charge:

  • Secrets
  • Feature Flags
  • Segments
  • CMS
  • Cron Jobs
  • Workflows

See modules for details.

Security

Section titled “Security”

What we do:

  • AES-256-GCM encryption for secrets
  • TLS for all connections
  • Isolated database per organization
  • Argon2 for API key hashing

What we don’t do:

  • SOC 2 (not pursued)
  • GDPR tooling (no export/delete APIs)
  • Audit logging (only history for secrets/flags/CMS)
  • High availability (single instance per deployment)

Employee access: Soup employees can access your data for support/debugging. It’s a standard multi-tenant SaaS, not a zero-knowledge system.

Getting Started

Section titled “Getting Started”
  1. Sign up at app.getsoup.dev
  2. Authenticate with GitHub
  3. Create a project
  4. Start using modules

CLI Integration

Section titled “CLI Integration”
Terminal window
# Login with browser
soup login


# Or device flow for remote machines
soup login --device


# Now use CLI normally
soup secrets list
soup flags list

API Access

Section titled “API Access”

Create API tokens in Settings → API Tokens.

Terminal window
# Use in API calls
curl -H "Authorization: Bearer soup_pat_..." \
  https://app.getsoup.dev/api/v1/projects/my-app/secrets

Migrating from Self-Hosted

Section titled “Migrating from Self-Hosted”

Download secrets from self-hosted instance and upload to Cloud via API or dashboard. No automated migration tool yet.

Next Steps

Section titled “Next Steps”