---
title: Create Temporary Access Credentials
---

[Skip to content](#_top)

[API Reference](https://developers.cloudflare.com/api/python)

[R2](https://developers.cloudflare.com/api/python/resources/r2)

[Temporary Credentials](https://developers.cloudflare.com/api/python/resources/r2/subresources/temporary_credentials)

Copy Markdown

Open in **Claude**Open in **ChatGPT**Open in **Cursor**

---

**Copy Markdown****View as Markdown**

# Create Temporary Access Credentials

r2.temporary\_credentials.create(TemporaryCredentialCreateParams\*\*kwargs) -> [TemporaryCredentialCreateResponse](<https://developers.cloudflare.com/api/python/resources/r2#(resource)%20r2.temporary_credentials%20%3E%20(model)%20temporary_credential_create_response%20%3E%20(schema)>)

POST/accounts/{account\_id}/r2/temp-access-credentials

Creates temporary access credentials on a bucket that can be optionally scoped to prefixes or objects.

##### Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. [Create a token](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/).

**Example:**`Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY`

##### ParametersExpand Collapse

account\_id: str

Cloudflare account ID that owns the R2 resource.

maxLength32

[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>)

bucket: str

Name of the R2 bucket.

[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20bucket%20%3E%20(schema)>)

parent\_access\_key\_id: str

Access key ID of the parent R2 API token. The temporary credentials cannot exceed this token’s permissions.

[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20parentAccessKeyId%20%3E%20(schema)>)

<details>

<summary>

permission: Literal\["admin-read-write", "admin-read-only", "object-read-write", "object-read-only"]

Permissions allowed on the credentials.

</summary>

One of the following:

"admin-read-write"

<a href="#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20permission%20%3E%20(schema)%20%3E%20(member)%200">Link to this property</a>

"admin-read-only"

<a href="#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20permission%20%3E%20(schema)%20%3E%20(member)%201">Link to this property</a>

"object-read-write"

<a href="#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20permission%20%3E%20(schema)%20%3E%20(member)%202">Link to this property</a>

"object-read-only"

<a href="#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20permission%20%3E%20(schema)%20%3E%20(member)%203">Link to this property</a>

</details>

[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20permission%20%3E%20(schema)>)

ttl\_seconds: float

Lifetime of the temporary credentials in seconds, up to 604800 seconds (7 days).

maximum604800

[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20ttlSeconds%20%3E%20(schema)>)

objects: Optional\[Sequence\[str]]

Optional object paths to scope the credentials to.

[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20objects%20%3E%20(schema)>)

prefixes: Optional\[Sequence\[str]]

Optional prefix paths to scope the credentials to.

[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20prefixes%20%3E%20(schema)>)

##### ReturnsExpand Collapse

<details>

<summary>

class TemporaryCredentialCreateResponse: …

</summary>

access\_key\_id: Optional\[str]

ID for new access key.

<a href="#(resource)%20r2.temporary_credentials%20%3E%20(model)%20temporary_credential_create_response%20%3E%20(schema)%20%3E%20(property)%20accessKeyId">Link to this property</a>

secret\_access\_key: Optional\[str]

Secret access key.

<a href="#(resource)%20r2.temporary_credentials%20%3E%20(model)%20temporary_credential_create_response%20%3E%20(schema)%20%3E%20(property)%20secretAccessKey">Link to this property</a>

session\_token: Optional\[str]

Security token.

<a href="#(resource)%20r2.temporary_credentials%20%3E%20(model)%20temporary_credential_create_response%20%3E%20(schema)%20%3E%20(property)%20sessionToken">Link to this property</a>

</details>

[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(model)%20temporary_credential_create_response%20%3E%20(schema)>)

### Create Temporary Access Credentials

Python

HTTPTypeScriptPythonGoTerraform

```
import os
from cloudflare import Cloudflare

client = Cloudflare(
    api_token=os.environ.get("CLOUDFLARE_API_TOKEN"),  # This is the default and can be omitted
)
temporary_credential = client.r2.temporary_credentials.create(
    account_id="023e105f4ecef8ad9ca31a8372d0c353",
    bucket="example-bucket",
    parent_access_key_id="example-access-key-id",
    permission="object-read-write",
    ttl_seconds=3600,
)
print(temporary_credential.access_key_id)
```

200 example

```
{
  "errors": [
    {
      "code": 1000,
      "message": "message",
      "documentation_url": "documentation_url",
      "source": {
        "pointer": "pointer"
      }
    }
  ],
  "messages": [
    "string"
  ],
  "result": {
    "accessKeyId": "example-access-key-id",
    "secretAccessKey": "example-secret-key",
    "sessionToken": "example-session-token"
  },
  "success": true
}
```

##### Returns Examples

200 example

```
{
  "errors": [
    {
      "code": 1000,
      "message": "message",
      "documentation_url": "documentation_url",
      "source": {
        "pointer": "pointer"
      }
    }
  ],
  "messages": [
    "string"
  ],
  "result": {
    "accessKeyId": "example-access-key-id",
    "secretAccessKey": "example-secret-key",
    "sessionToken": "example-session-token"
  },
  "success": true
}
```