E0022

Direct deployment from the CLI requires an API key with deployments:write.

CLI sessions, including device logins, submit deployments for browser approval without --yes. The command waits for approval even when stdin is redirected. Only an API key with deployments:write can use --yes to deploy directly from the CLI; create one with crab key create ci --scope deployments:write --scope services:write. Service configuration changes also require services:write. An account owner approves requests in the website. Deletion and revocation require a session.