Manage API tokens
InfluxDB API tokens ensure secure interaction between InfluxDB and external tools such as clients or applications. An API token belongs to a specific user and identifies InfluxDB permissions within the user’s organization.
Learn how to create, view, update, or delete an API token.
API token types
Operator token
Grants full read and write access to all organizations and all organization resources in InfluxDB OSS 2.x. Some operations, e.g. retrieving the server configuration, require operator permissions. Operator tokens are created in the InfluxDB setup process. To create an operator token manually with the InfluxDB UI, api/v2
API, or influx
CLI after the setup process is completed, you must use an existing Operator token.
To create a new Operator token without using an existing one, see how to use the influxd recovery auth CLI.
Because Operator tokens have full read and write access to all organizations in the database, we recommend creating an All Access token for each organization and using those to manage InfluxDB. This helps to prevent accidental interactions across organizations.
All Access token
Grants full read and write access to all resources in an organization.
Read/Write token
Grants read access, write access, or both to specific buckets in an organization.
Create a token
Create an API token in InfluxDB using the InfluxDB UI, the influx
CLI, or the InfluxDB API.
View tokens
View API tokens in InfluxDB using the InfluxDB UI, the influx
CLI, or the InfluxDB API.
Update a token
Update API tokens’ descriptions in InfluxDB using the InfluxDB UI.
Delete a token
Delete an API token from InfluxDB using the InfluxDB UI or the influx
CLI.
Use tokens
Use an API token in the InfluxDB UI, the influx
CLI, or the InfluxDB API.
tokens authentication security