glab-token-create - Man Page

Creates user, group, or project access tokens.

Synopsis

glab token create  [flags]

Description

Creates a new access token for a user, group, or project. Defaults to a project access token, unless user or group name is specified.

The expiration date of the token is calculated by adding the duration (default: 30 days) to the current date. You can specify a different duration, or an explicit end date.

The name of the token must be unique. The token is printed to stdout.

Administrators can create full-featured personal access tokens for themselves and for other users.

Non-administrators can create personal access tokens only for themselves (@me). These tokens must use the scope 'k8s_proxy'. For more information, see the GitLab documentation for the User tokens API ⟨https://docs.gitlab.com/api/user_tokens/#create-a-personal-access-token⟩.

Options

-A, --access-level=no Access level of the token: one of 'guest', 'reporter', 'developer', 'maintainer', 'owner'.

--description="description" Sets the token's description.

-D, --duration=720h0m0s Sets the token duration, in hours. Maximum of 8760. Examples: 24h, 168h, 504h.

-E, --expires-at=0001-01-01 Sets the token's expiration date and time, in YYYY-MM-DD format. If not specified, --duration is used.

-g, --group="" Create a group access token. Ignored if a user or repository argument is set.

-F, --output="text" Format output as 'text' for the token value, 'json' for the actual API token structure.

-R,  --repo="" Select another repository. Can use either OWNER/REPO or GROUP/NAMESPACE/REPO
format. Also accepts full URL or Git URL.

-S, --scope=[read_repository] Scopes for the token. For a list, see https://docs.gitlab.com/user/profile/personal_access_tokens/#personal-access-token-scopes.

-U, --user="" Create a personal access token. For the current user, use @me.

Options Inherited from Parent Commands

--help[=false] Show help for this command.

Example

Create project access token for current project
- glab token create --access-level developer --scope read_repository --scope read_registry my-project-token

Create project access token for a specific project
- glab token create --repo user/my-repo --access-level owner --scope api my-project-token --description "example description"

Create a group access token
- glab token create --group group/sub-group --access-level owner --scope api my-group-token

Create a personal access token for current user
- glab token create --user @me --scope k8s_proxy my-personal-token

(administrator only) Create a personal access token for another user
- glab token create --user johndoe --scope api johns-personal-token

See Also

glab-token(1)

Referenced By

glab-token(1).

Jul 2025 Auto generated by spf13/cobra