Ship it in one line.

# forge.toml is optional. This is all of it.[project]name    = "acme-shop"runtime = "node22" [build]command = "pnpm build"output  = ".next" [edge]regions = ["fra", "iad", "sin", "gru"]min_instances = 0   # still a 12 ms cold start

forge.toml

Zero config

Forge reads your lockfile and framework and picks the build for you. Add a file only when you want to overrule it.

• 40+ frameworks
• monorepos
• Docker if you insist

$ git push origin feat/checkout remote: forge  building preview for feat/checkoutremote: forge  checks: lint, types, 212 testsremote: forge  ready in 9.1sremote: forge  -> feat-checkout.acme-shop.forge.runremote: forge  comment posted on PR #482 # merge the PR and the same build goes to production

preview.sh

A URL for every PR

Push a branch and Forge builds an immutable preview, runs your checks and drops the link in the pull request.

• GitHub
• GitLab
• Bitbucket

// api/hello.ts runs in 41 regions. No config.export const config = { runtime: "edge" }; export default async function handler(req: Request) {  const city = req.headers.get("x-forge-city");  return Response.json({ hello: city ?? "world" });} // $ forge deploy  =>  /api/hello answers in 12 ms

api/hello.ts

Edge functions

Drop a file in api/ and it runs next to your users in 41 regions, with cold starts you will not notice.

• TypeScript
• Go
• Rust
• Python

$ forge deployments --limit 3  9f2c1ab  main  live    2 min ago  41d0e7c  main  ready   1 h ago  c07b3aa  main  ready   yesterday $ forge rollback 41d0e7c  ok  traffic moved to 41d0e7c in 240 ms # nothing was rebuilt. every deploy is kept.

rollback.sh

Instant rollback

Every build is kept and addressable. Moving traffic back is a pointer swap, not a redeploy.

• 240 ms
• per-region
• from Slack

$ forge env add STRIPE_KEY --prod? value  ********************************  ok  encrypted with AES-256-GCM  ok  stored in fra, iad (EU + US)  ok  next deploy gets process.env.STRIPE_KEY $ forge env pull --dev  ok  wrote .env.local (12 keys)

secrets.sh

Secrets that stay secret

Encrypted at rest, scoped per environment, never printed in build logs. Pull them locally in one line.

• SOC 2 Type II
• audit log
• SSO on Team