Manage tokens

InfluxDB 3 Cloud uses token-based authorization to authenticate and authorize actions in your instance.

Choose a token-management method

Manage tokens in the InfluxDB 3 Cloud Admin UI at console.influxdata.com, with the influxdb3 CLI, or through the InfluxDB HTTP API. The CLI procedures on this page use your instance host URL and login. In the Admin UI, select your instance and open Tokens. Access to the Tokens page requires the account Admin role.

Token types

InfluxDB 3 Cloud supports the following token types:

  • Admin tokens: Grant full administrative access to all actions and resources in the instance.
    • Operator token: The first admin token on an instance. InfluxData manages the operator token for your InfluxDB 3 Cloud instance. Customers cannot access or use the operator token.
      • Never expires
      • Cannot be edited or deleted
    • Named admin tokens: Additional admin tokens that you create and manage.
      • Can be created, edited, and deleted
      • Long-lived by default and expire only if you set an expiration
      • Cannot modify or remove the operator token
  • Database tokens: Grant scoped read and write access to specific databases. Use database tokens to authorize applications that write or query data.
    • Grant read, write, or both to one or more databases
    • Cannot perform administrative actions

Store secure tokens in a secret store

Token strings are returned only when you create the token. Store tokens in a secure secret store. Anyone with access to an admin token has full control over your InfluxDB 3 Cloud instance. If you lose a token string, recreate the token.

Create a token

Before you create tokens:

Create a named admin token:

influxdb3 create token --admin --name "support-2026"

To set an expiration, add --expiry with a duration (for example, 90d or 1y):

influxdb3 create token --admin --name "temp-90d" --expiry 90d

Create a database token with scoped read and write permissions:

influxdb3 create token \
  --permission "db:
DATABASE_NAME
:read,write" \
  --name "Read/write token for 
DATABASE_NAME
"

Copy the raw token string immediately and store it securely. It’s shown only once.

List tokens

List token names, types, and expirations (token strings aren’t shown):

influxdb3 show tokens

Delete a token

influxdb3 delete token --token-name "
TOKEN_NAME
"

Because InfluxDB 3 Cloud runs the same InfluxDB 3 engine as InfluxDB 3 Enterprise, token management works the same way. For more details, see Manage tokens in InfluxDB 3 Enterprise.

Was this page helpful?

Thank you for your feedback!