diff --git a/.github/workflows/deploy-flakehub.yml b/.github/workflows/deploy-flakehub.yml
new file mode 100644
index 0000000..c355d7f
--- /dev/null
+++ b/.github/workflows/deploy-flakehub.yml
@@ -0,0 +1,29 @@
+name: "Publish tags to FlakeHub"
+on:
+  push:
+    tags:
+      - "v?[0-9]+.[0-9]+.[0-9]+*"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "The existing tag to publish to FlakeHub"
+        type: "string"
+        required: true
+jobs:
+  flakehub-publish:
+    runs-on: "ubuntu-latest"
+    permissions:
+      id-token: "write"
+      contents: "read"
+    steps:
+      - uses: "actions/checkout@v5"
+        with:
+          persist-credentials: false
+          ref: "${{ (inputs.tag != null) && format('refs/tags/{0}', inputs.tag) || '' }}"
+      - uses: "DeterminateSystems/determinate-nix-action@v3"
+      - uses: "DeterminateSystems/flakehub-push@main"
+        with:
+          visibility: "public"
+          name: "utensils/mcp-nixos"
+          tag: "${{ inputs.tag }}"
+          include-output-paths: true