Skip to main content
fal run ignores the auth set on fal.App and in pyproject.toml and defaults to public so the app is reachable for testing. Pass --auth to override. In a future major release the default will become private and the fal.App/pyproject.toml value will be respected.

Authentication Modes

The --auth flag controls who can access your app while it’s running:
  • public (default for fal run): Anyone can call your app without authentication. You pay for all usage.
  • private: Only you (or your team) can call the app. Requires a valid API key.
  • shared: Any authenticated fal user can call the app.
By default, fal run uses public mode for easy testing during development.