--- title: Tokens --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/python) [Accounts](https://developers.cloudflare.com/api/python/resources/accounts) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Tokens ##### [List Tokens](https://developers.cloudflare.com/api/python/resources/accounts/subresources/tokens/methods/list) accounts.tokens.list(TokenListParams\*\*kwargs) -> SyncV4PagePaginationArray\[[Token]()] GET/accounts/{account\_id}/tokens ##### [Token Details](https://developers.cloudflare.com/api/python/resources/accounts/subresources/tokens/methods/get) accounts.tokens.get(strtoken\_id, TokenGetParams\*\*kwargs) -> [Token]() GET/accounts/{account\_id}/tokens/{token\_id} ##### [Create Token](https://developers.cloudflare.com/api/python/resources/accounts/subresources/tokens/methods/create) accounts.tokens.create(TokenCreateParams\*\*kwargs) -> [TokenCreateResponse]() POST/accounts/{account\_id}/tokens ##### [Update Token](https://developers.cloudflare.com/api/python/resources/accounts/subresources/tokens/methods/update) accounts.tokens.update(strtoken\_id, TokenUpdateParams\*\*kwargs) -> [Token]() PUT/accounts/{account\_id}/tokens/{token\_id} ##### [Delete Token](https://developers.cloudflare.com/api/python/resources/accounts/subresources/tokens/methods/delete) accounts.tokens.delete(strtoken\_id, TokenDeleteParams\*\*kwargs) -> [TokenDeleteResponse]() DELETE/accounts/{account\_id}/tokens/{token\_id} ##### [Verify Token](https://developers.cloudflare.com/api/python/resources/accounts/subresources/tokens/methods/verify) accounts.tokens.verify(TokenVerifyParams\*\*kwargs) -> [TokenVerifyResponse]() GET/accounts/{account\_id}/tokens/verify ##### ModelsExpand Collapse
class TokenCreateResponse: … id: Optional\[str] Token identifier tag. maxLength32 Link to this property
condition: Optional\[Condition]
request\_ip: Optional\[ConditionRequestIP] Client IP restrictions. in\_: Optional\[List\[TokenConditionCIDRList]] List of IPv4/IPv6 CIDR addresses. Link to this property not\_in: Optional\[List\[TokenConditionCIDRList]] List of IPv4/IPv6 CIDR addresses. Link to this property
Link to this property
Link to this property creator\_email\_at\_creation: Optional\[str] The email address of the user who created the token at the time of creation. Only present for Account Owned API Tokens when a creator email was available. maxLength90 Link to this property expires\_on: Optional\[datetime] The expiration time on or after which the JWT MUST NOT be accepted for processing. formatdate-time Link to this property issued\_on: Optional\[datetime] The time on which the token was created. formatdate-time Link to this property last\_used\_on: Optional\[datetime] Last time the token was used. formatdate-time Link to this property modified\_on: Optional\[datetime] Last time the token was modified. formatdate-time Link to this property name: Optional\[str] Token name. maxLength120 Link to this property not\_before: Optional\[datetime] The time before which the token MUST NOT be accepted for processing. formatdate-time Link to this property
policies: Optional\[List\[TokenPolicy]] List of access policies assigned to the token. id: str Policy identifier. Link to this property
effect: Literal\["allow", "deny"] Allow or deny operations against the resources. One of the following: "allow" Link to this property "deny" Link to this property
Link to this property
permission\_groups: List\[PermissionGroup] A set of permission groups that are specified to the policy. id: str Identifier of the permission group. Link to this property
meta: Optional\[PermissionGroupMeta] Attributes associated to the permission group. category: Optional\[str] A category used to group permission groups. Link to this property deprecated: Optional\[str] Indicates whether the permission group is deprecated. Link to this property description: Optional\[str] Additional information about the permission group. Link to this property editable: Optional\[str] Indicates whether the permission group can be edited. Link to this property eol\_at: Optional\[datetime] The planned end-of-life date and time, when provided. formatdate-time Link to this property label: Optional\[str] A label identifying the permission group. Link to this property scopes: Optional\[str] The scope associated with the permission group. Link to this property visibility: Optional\[str] Indicates the permission group’s availability or visibility. Link to this property
Link to this property name: Optional\[str] Name of the permission group. Link to this property
Link to this property
resources: Union\[Dict\[str, str], Dict\[str, Dict\[str, str]]] A list of resource names that the policy applies to. One of the following: Dict\[str, str] Map of simple string resource permissions Link to this property Dict\[str, Dict\[str, str]] Map of nested resource permissions Link to this property
Link to this property
Link to this property provisioner\_id: Optional\[str] The identifier of the service that provisioned the token. For an OAuth-provisioned token, this is the OAuth client identifier. Present when provisioner_type is present and null when the identifier is unavailable. Link to this property provisioner\_type: Optional\[str] The type of service that provisioned the token. Only present for provisioned Account Owned API Tokens. Link to this property
status: Optional\[Literal\["active", "disabled", "expired"]] Status of the token. One of the following: "active" Link to this property "disabled" Link to this property "expired" Link to this property
Link to this property value: Optional\[TokenValue] The token value. maxLength80 minLength40 Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(model)%20token_create_response%20%3E%20(schema)>)
class TokenDeleteResponse: … id: str Identifier maxLength32 minLength32 Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(model)%20token_delete_response%20%3E%20(schema)>)
class TokenVerifyResponse: … id: str Token identifier tag. maxLength32 Link to this property
status: Literal\["active", "disabled", "expired"] Status of the token. One of the following: "active" Link to this property "disabled" Link to this property "expired" Link to this property
Link to this property expires\_on: Optional\[datetime] The expiration time on or after which the JWT MUST NOT be accepted for processing. formatdate-time Link to this property not\_before: Optional\[datetime] The time before which the token MUST NOT be accepted for processing. formatdate-time Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(model)%20token_verify_response%20%3E%20(schema)>) #### TokensPermission Groups ##### [List Permission Groups](https://developers.cloudflare.com/api/python/resources/accounts/subresources/tokens/subresources/permission_groups/methods/list) accounts.tokens.permission\_groups.list(PermissionGroupListParams\*\*kwargs) -> SyncSinglePage\[[PermissionGroupListResponse]()] GET/accounts/{account\_id}/tokens/permission\_groups ##### [List Permission Groups](https://developers.cloudflare.com/api/python/resources/accounts/subresources/tokens/subresources/permission_groups/methods/get) accounts.tokens.permission\_groups.get(PermissionGroupGetParams\*\*kwargs) -> [PermissionGroupGetResponse]() GET/accounts/{account\_id}/tokens/permission\_groups ##### ModelsExpand Collapse
class PermissionGroupListResponse: … id: Optional\[str] Public ID. Link to this property
category: Optional\[Literal\["developer\_platform", "ai\_and\_machine\_learning", "dns\_and\_zones", 10 more]] Product category that this permission group belongs to. One of the following: "developer\_platform" Link to this property "ai\_and\_machine\_learning" Link to this property "dns\_and\_zones" Link to this property "app\_security" Link to this property "rules\_and\_configuration" Link to this property "cloudflare\_one\_and\_zero\_trust" Link to this property "analytics\_and\_logs" Link to this property "network\_services" Link to this property "media" Link to this property "email\_and\_messaging" Link to this property "cache\_and\_performance" Link to this property "account\_and\_billing" Link to this property "other" Link to this property
Link to this property is\_selectable: Optional\[bool] Whether the caller can select this permission group when creating a token. Link to this property name: Optional\[str] Permission Group Name Link to this property
scopes: Optional\[List\[Literal\["com.cloudflare.api.account", "com.cloudflare.api.account.zone", "com.cloudflare.api.user", "com.cloudflare.edge.r2.bucket"]]] Resources to which the Permission Group is scoped One of the following: "com.cloudflare.api.account" Link to this property "com.cloudflare.api.account.zone" Link to this property "com.cloudflare.api.user" Link to this property "com.cloudflare.edge.r2.bucket" Link to this property
Link to this property
[Link to this property](<#(resource)%20accounts.tokens.permission_groups%20%3E%20(model)%20permission_group_list_response%20%3E%20(schema)>)
List\[PermissionGroupGetResponseItem] id: Optional\[str] Public ID. Link to this property
category: Optional\[Literal\["developer\_platform", "ai\_and\_machine\_learning", "dns\_and\_zones", 10 more]] Product category that this permission group belongs to. One of the following: "developer\_platform" Link to this property "ai\_and\_machine\_learning" Link to this property "dns\_and\_zones" Link to this property "app\_security" Link to this property "rules\_and\_configuration" Link to this property "cloudflare\_one\_and\_zero\_trust" Link to this property "analytics\_and\_logs" Link to this property "network\_services" Link to this property "media" Link to this property "email\_and\_messaging" Link to this property "cache\_and\_performance" Link to this property "account\_and\_billing" Link to this property "other" Link to this property
Link to this property is\_selectable: Optional\[bool] Whether the caller can select this permission group when creating a token. Link to this property name: Optional\[str] Permission Group Name Link to this property
scopes: Optional\[List\[Literal\["com.cloudflare.api.account", "com.cloudflare.api.account.zone", "com.cloudflare.api.user", "com.cloudflare.edge.r2.bucket"]]] Resources to which the Permission Group is scoped One of the following: "com.cloudflare.api.account" Link to this property "com.cloudflare.api.account.zone" Link to this property "com.cloudflare.api.user" Link to this property "com.cloudflare.edge.r2.bucket" Link to this property
Link to this property
[Link to this property](<#(resource)%20accounts.tokens.permission_groups%20%3E%20(model)%20permission_group_get_response%20%3E%20(schema)>) #### TokensValue ##### [Roll Token](https://developers.cloudflare.com/api/python/resources/accounts/subresources/tokens/subresources/value/methods/update) accounts.tokens.value.update(strtoken\_id, ValueUpdateParams\*\*kwargs) -> [TokenValue]() PUT/accounts/{account\_id}/tokens/{token\_id}/value