glab-token-create - Man Page

glab token create  [flags]

Creates a new access token for a user, group, or project. Defaults to a project access token, unless user or group name is specified.

The expiration date of the token is calculated by adding the duration (default: 30 days) to the current date. You can specify a different duration, or an explicit end date.

The name of the token must be unique. The token is printed to stdout.

Administrators can create full-featured personal access tokens for themselves and for other users. Non-administrators can create personal access tokens only for themselves (@me) with the scope 'k8s_proxy'.

-A, --access-level=no Access level of the token: one of 'guest', 'reporter', 'developer', 'maintainer', 'owner'.

-D, --duration=720h0m0s Sets the token duration, in hours. Maximum of 8760. Examples: 24h, 168h, 504w.

-E, --expires-at=0001-01-01 Sets the token's expiration date and time, in YYYY-MM-DD format. If not specified, --duration is used.

-g, --group="" Create a group access token. Ignored if a user or repository argument is set.

-F, --output="text" Format output as 'text' for the token value, 'json' for the actual API token structure.

-R,  --repo="" Select another repository. Can use either OWNER/REPO or GROUP/NAMESPACE/REPO

format. Also accepts full URL or Git URL.

-S, --scope=[read_repository] Scopes for the token. For a list, see https://docs.gitlab.com/ee/user/profile/personal_access_tokens.html#personal-access-token-scopes.

-U, --user="" Create a personal access token. For the current user, use @me.

--help[=false] Show help for this command.

# Create project access token for current project
glab token create --access-level developer --scope read_repository --scope read_registry my-project-token

# Create project access token for a specific project
glab token create --repo user/my-repo --access-level owner --scope api my-project-token

# Create a group access token
glab token create --group group/sub-group --access-level owner --scope api my-group-token

# Create a personal access token for current user
glab token create --user @me --scope k8s_proxy my-personal-token

# (administrator only) Create a personal access token for another user
glab token create --user johndoe --scope api johns-personal-token

glab-token(1)

glab-token(1).