---
title: Update Token
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[Accounts](https://developers.cloudflare.com/api/resources/accounts)
[Tokens](https://developers.cloudflare.com/api/resources/accounts/subresources/tokens)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Update Token
PUT/accounts/{account\_id}/tokens/{token\_id}
Update an existing token.
##### Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. [Create a token](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/).
**Example:**`Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY`
##### Accepted Permissions (at least one required)
`Account API Tokens Write`
##### P ath ParametersExpand Collapse
account\_id: string
Account identifier tag.
maxLength32
minLength32
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20update%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>)
token\_id: string
Token identifier tag.
maxLength32
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20update%20%3E%20(params)%20default%20%3E%20(param)%20token_id%20%3E%20(schema)>)
##### Body ParametersJSONExpand Collapse
name: string
Token name.
maxLength120
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20update%20%3E%20(params)%200%20%3E%20(param)%20name%20%3E%20(schema)>)
policies: array of TokenPolicy { id, effect, permission\_groups, resources }
List of access policies assigned to the token.
id: string
Policy identifier.
Link to this property
effect: "allow"or "deny"
Allow or deny operations against the resources.
One of the following:
"allow"
Link to this property
"deny"
Link to this property
Link to this property
permission\_groups: array of object {id, meta, name }
A set of permission groups that are specified to the policy.
id: string
Identifier of the permission group.
Link to this property
meta: optional object {category, deprecated, description, 5 more }
Attributes associated to the permission group.
category: optional string
A category used to group permission groups.
Link to this property
deprecated: optional string
Indicates whether the permission group is deprecated.
Link to this property
description: optional string
Additional information about the permission group.
Link to this property
editable: optional string
Indicates whether the permission group can be edited.
Link to this property
eol\_at: optional string
The planned end-of-life date and time, when provided.
formatdate-time
Link to this property
label: optional string
A label identifying the permission group.
Link to this property
scopes: optional string
The scope associated with the permission group.
Link to this property
visibility: optional string
Indicates the permission group’s availability or visibility.
Link to this property
Link to this property
name: optional string
Name of the permission group.
Link to this property
Link to this property
resources: map\[string]or map\[map\[string]]
A list of resource names that the policy applies to.
One of the following:
IAMResourcesTypeObjectString = map\[string]
Map of simple string resource permissions
Link to this property
IAMResourcesTypeObjectNested = map\[map\[string]]
Map of nested resource permissions
Link to this property
Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20update%20%3E%20(params)%200%20%3E%20(param)%20policies%20%3E%20(schema)>)
condition: optional object {request\_ip }
request\_ip: optional object {in, not\_in }
Client IP restrictions.
in: optional array of TokenConditionCIDRList
List of IPv4/IPv6 CIDR addresses.
Link to this property
not\_in: optional array of TokenConditionCIDRList
List of IPv4/IPv6 CIDR addresses.
Link to this property
Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20update%20%3E%20(params)%200%20%3E%20(param)%20condition%20%3E%20(schema)>)
expires\_on: optional string
The expiration time on or after which the JWT MUST NOT be accepted for processing.
formatdate-time
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20update%20%3E%20(params)%200%20%3E%20(param)%20expires_on%20%3E%20(schema)>)
not\_before: optional string
The time before which the token MUST NOT be accepted for processing.
formatdate-time
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20update%20%3E%20(params)%200%20%3E%20(param)%20not_before%20%3E%20(schema)>)
status: optional "active"or "disabled"or "expired"
Status of the token.
One of the following:
"active"
Link to this property
"disabled"
Link to this property
"expired"
Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20update%20%3E%20(params)%200%20%3E%20(param)%20status%20%3E%20(schema)>)
##### ReturnsExpand Collapse
errors: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20update%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20update%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
success: true
Whether the API call was successful.
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20update%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
result: optional Token { id, condition, creator\_email\_at\_creation, 10 more }
id: optional string
Token identifier tag.
maxLength32
Link to this property
condition: optional object {request\_ip }
request\_ip: optional object {in, not\_in }
Client IP restrictions.
in: optional array of TokenConditionCIDRList
List of IPv4/IPv6 CIDR addresses.
Link to this property
not\_in: optional array of TokenConditionCIDRList
List of IPv4/IPv6 CIDR addresses.
Link to this property
Link to this property
Link to this property
creator\_email\_at\_creation: optional string
The email address of the user who created the token at the time of creation. Only present for Account Owned API Tokens when a creator email was available.
maxLength90
Link to this property
expires\_on: optional string
The expiration time on or after which the JWT MUST NOT be accepted for processing.
formatdate-time
Link to this property
issued\_on: optional string
The time on which the token was created.
formatdate-time
Link to this property
last\_used\_on: optional string
Last time the token was used.
formatdate-time
Link to this property
modified\_on: optional string
Last time the token was modified.
formatdate-time
Link to this property
name: optional string
Token name.
maxLength120
Link to this property
not\_before: optional string
The time before which the token MUST NOT be accepted for processing.
formatdate-time
Link to this property
policies: optional array of TokenPolicy { id, effect, permission\_groups, resources }
List of access policies assigned to the token.
id: string
Policy identifier.
Link to this property
effect: "allow"or "deny"
Allow or deny operations against the resources.
One of the following:
"allow"
Link to this property
"deny"
Link to this property
Link to this property
permission\_groups: array of object {id, meta, name }
A set of permission groups that are specified to the policy.
id: string
Identifier of the permission group.
Link to this property
meta: optional object {category, deprecated, description, 5 more }
Attributes associated to the permission group.
category: optional string
A category used to group permission groups.
Link to this property
deprecated: optional string
Indicates whether the permission group is deprecated.
Link to this property
description: optional string
Additional information about the permission group.
Link to this property
editable: optional string
Indicates whether the permission group can be edited.
Link to this property
eol\_at: optional string
The planned end-of-life date and time, when provided.
formatdate-time
Link to this property
label: optional string
A label identifying the permission group.
Link to this property
scopes: optional string
The scope associated with the permission group.
Link to this property
visibility: optional string
Indicates the permission group’s availability or visibility.
Link to this property
Link to this property
name: optional string
Name of the permission group.
Link to this property
Link to this property
resources: map\[string]or map\[map\[string]]
A list of resource names that the policy applies to.
One of the following:
IAMResourcesTypeObjectString = map\[string]
Map of simple string resource permissions
Link to this property
IAMResourcesTypeObjectNested = map\[map\[string]]
Map of nested resource permissions
Link to this property
Link to this property
Link to this property
provisioner\_id: optional string
The identifier of the service that provisioned the token. For an OAuth-provisioned token, this is the OAuth client identifier. Present when provisioner_type is present and null when the identifier is unavailable.
Link to this property
provisioner\_type: optional string
The type of service that provisioned the token. Only present for provisioned Account Owned API Tokens.
Link to this property
status: optional "active"or "disabled"or "expired"
Status of the token.
One of the following:
"active"
Link to this property
"disabled"
Link to this property
"expired"
Link to this property
Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20update%20%3E%20(network%20schema)%20%3E%20(property)%20result>)
### Update Token
HTTP
HTTPTypeScriptPythonGoTerraform
```
curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/tokens/$TOKEN_ID \
-X PUT \
-H 'Content-Type: application/json' \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
-d '{
"name": "readonly token",
"policies": [
{
"effect": "allow",
"permission_groups": [
{
"id": "c8fed203ed3043cba015a93ad1616f1f",
"meta": {
"label": "load_balancer_admin",
"scopes": "com.cloudflare.api.account"
}
},
{
"id": "82e64a83756745bbbb1c9c2701bf816b",
"meta": {
"label": "fbm_user",
"scopes": "com.cloudflare.api.account"
}
}
],
"resources": {
"com.cloudflare.api.account.zone.22b1de5f1c0e4b3ea97bb1e963b06a43": "*"
}
}
],
"expires_on": "2020-01-01T00:00:00Z",
"not_before": "2018-07-01T05:20:00Z",
"status": "active"
}'
```
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"id": "ed17574386854bf78a67040be0a770b0",
"condition": {
"request_ip": {
"in": [
"123.123.123.0/24",
"2606:4700::/32"
],
"not_in": [
"123.123.123.100/24",
"2606:4700:4700::/48"
]
}
},
"creator_email_at_creation": "user@example.com",
"expires_on": "2020-01-01T00:00:00Z",
"issued_on": "2018-07-01T05:20:00Z",
"last_used_on": "2020-01-02T12:34:00Z",
"modified_on": "2018-07-02T05:20:00Z",
"name": "readonly token",
"not_before": "2018-07-01T05:20:00Z",
"policies": [
{
"id": "f267e341f3dd4697bd3b9f71dd96247f",
"effect": "allow",
"permission_groups": [
{
"id": "c8fed203ed3043cba015a93ad1616f1f",
"meta": {
"category": "category",
"deprecated": "deprecated",
"description": "description",
"editable": "editable",
"eol_at": "2019-12-27T18:11:19.117Z",
"label": "load_balancer_admin",
"scopes": "com.cloudflare.api.account",
"visibility": "visibility"
},
"name": "Zone Read"
},
{
"id": "82e64a83756745bbbb1c9c2701bf816b",
"meta": {
"category": "category",
"deprecated": "deprecated",
"description": "description",
"editable": "editable",
"eol_at": "2019-12-27T18:11:19.117Z",
"label": "fbm_user",
"scopes": "com.cloudflare.api.account",
"visibility": "visibility"
},
"name": "Magic Network Monitoring"
}
],
"resources": {
"com.cloudflare.api.account.zone.22b1de5f1c0e4b3ea97bb1e963b06a43": "*"
}
}
],
"provisioner_id": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4",
"provisioner_type": "com.cloudflare.api.oauthtoken",
"status": "active"
}
}
```
##### Returns Examples
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"id": "ed17574386854bf78a67040be0a770b0",
"condition": {
"request_ip": {
"in": [
"123.123.123.0/24",
"2606:4700::/32"
],
"not_in": [
"123.123.123.100/24",
"2606:4700:4700::/48"
]
}
},
"creator_email_at_creation": "user@example.com",
"expires_on": "2020-01-01T00:00:00Z",
"issued_on": "2018-07-01T05:20:00Z",
"last_used_on": "2020-01-02T12:34:00Z",
"modified_on": "2018-07-02T05:20:00Z",
"name": "readonly token",
"not_before": "2018-07-01T05:20:00Z",
"policies": [
{
"id": "f267e341f3dd4697bd3b9f71dd96247f",
"effect": "allow",
"permission_groups": [
{
"id": "c8fed203ed3043cba015a93ad1616f1f",
"meta": {
"category": "category",
"deprecated": "deprecated",
"description": "description",
"editable": "editable",
"eol_at": "2019-12-27T18:11:19.117Z",
"label": "load_balancer_admin",
"scopes": "com.cloudflare.api.account",
"visibility": "visibility"
},
"name": "Zone Read"
},
{
"id": "82e64a83756745bbbb1c9c2701bf816b",
"meta": {
"category": "category",
"deprecated": "deprecated",
"description": "description",
"editable": "editable",
"eol_at": "2019-12-27T18:11:19.117Z",
"label": "fbm_user",
"scopes": "com.cloudflare.api.account",
"visibility": "visibility"
},
"name": "Magic Network Monitoring"
}
],
"resources": {
"com.cloudflare.api.account.zone.22b1de5f1c0e4b3ea97bb1e963b06a43": "*"
}
}
],
"provisioner_id": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4",
"provisioner_type": "com.cloudflare.api.oauthtoken",
"status": "active"
}
}
```