Authentication Modes
The--auth flag controls who can access your app while it’s running:
public(default forfal run): Anyone can call your app without authentication. You pay for all usage.private: Only you (or your team) can call the app. Requires a valid API key.shared: Any authenticated fal user can call the app.
fal run uses public mode for easy testing during development.