--- title: Temporary Credentials --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) [R2](https://developers.cloudflare.com/api/resources/r2) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Temporary Credentials ##### [Create Temporary Access Credentials](https://developers.cloudflare.com/api/resources/r2/subresources/temporary_credentials/methods/create) POST/accounts/{account\_id}/r2/temp-access-credentials ##### ModelsExpand Collapse

TemporaryCredential object {bucket, parentAccessKeyId, permission, 3 more }

bucket: string Name of the R2 bucket. Link to this property parentAccessKeyId: string Access key ID of the parent R2 API token. The temporary credentials cannot exceed this token’s permissions. Link to this property

permission: "admin-read-write"or "admin-read-only"or "object-read-write"or "object-read-only" Permissions allowed on the credentials.

One of the following: "admin-read-write" Link to this property "admin-read-only" Link to this property "object-read-write" Link to this property "object-read-only" Link to this property

Link to this property ttlSeconds: number Lifetime of the temporary credentials in seconds, up to 604800 seconds (7 days). maximum604800 Link to this property objects: optional array of string Optional object paths to scope the credentials to. Link to this property prefixes: optional array of string Optional prefix paths to scope the credentials to. Link to this property

[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(model)%20temporary_credential%20%3E%20(schema)>)

TemporaryCredentialCreateResponse object {accessKeyId, secretAccessKey, sessionToken }

accessKeyId: optional string ID for new access key. Link to this property secretAccessKey: optional string Secret access key. Link to this property sessionToken: optional string Security token. Link to this property

[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(model)%20temporary_credential_create_response%20%3E%20(schema)>)