Manage tokens

InfluxDB 3 Cloud uses token-based authorization to authenticate and authorize actions in your instance.

Manage InfluxDB 3 Cloud tokens with the influxdb3 CLI

In InfluxDB 3 Cloud, you create and manage tokens with the influxdb3 CLI or the InfluxDB HTTP API.

Token types

InfluxDB 3 Cloud supports the following token types:

  • Admin tokens: Grant full administrative access to all actions and resources in the instance.
    • Operator token: The first admin token on an instance. InfluxData manages the operator token for your InfluxDB 3 Cloud instance.
      • Never expires
      • Cannot be edited or deleted
    • Named admin tokens: Additional admin tokens that you create and manage.
      • Can be created, edited, and deleted
      • Long-lived by default and expire only if you set an expiration
      • Cannot modify or remove the operator token
  • Database tokens: Grant scoped read and write access to specific databases. Use database tokens to authorize applications that write or query data.
    • Grant read, write, or both to one or more databases
    • Cannot perform administrative actions

Store secure tokens in a secret store

Token strings are returned only when you create the token. Store tokens in a secure secret store. Anyone with access to an admin token has full control over your InfluxDB 3 Cloud instance. If you lose a token string, recreate the token.

Create a token

Before you create tokens:

Create a named admin token:

influxdb3 create token --admin --name "support-2026"

To set an expiration, add --expiry with a duration (for example, 90d or 1y):

influxdb3 create token --admin --name "temp-90d" --expiry 90d

Create a database token with scoped read and write permissions:

influxdb3 create token \
  --permission "db:
DATABASE_NAME
:read,write"
\
--name "Read/write token for
DATABASE_NAME
"

Copy the raw token string immediately and store it securely. It’s shown only once.

List tokens

List token names, types, and expirations (token strings aren’t shown):

influxdb3 show tokens

Delete a token

influxdb3 delete token --token-name "
TOKEN_NAME
"

Because InfluxDB 3 Cloud runs the same InfluxDB 3 engine as InfluxDB 3 Enterprise, token management works the same way. For more details, see Manage tokens in InfluxDB 3 Enterprise.


Was this page helpful?

Thank you for your feedback!