---
title: Create Temporary Access Credentials
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[R2](https://developers.cloudflare.com/api/resources/r2)
[Temporary Credentials](https://developers.cloudflare.com/api/resources/r2/subresources/temporary_credentials)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Create Temporary Access Credentials
POST/accounts/{account\_id}/r2/temp-access-credentials
Creates temporary access credentials on a bucket that can be optionally scoped to prefixes or objects.
##### Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. [Create a token](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/).
**Example:**`Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY`
##### P ath ParametersExpand Collapse
account\_id: string
Cloudflare account ID that owns the R2 resource.
maxLength32
[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>)
##### Body ParametersJSONExpand Collapse
bucket: string
Name of the R2 bucket.
[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20bucket%20%3E%20(schema)>)
parentAccessKeyId: string
Access key ID of the parent R2 API token. The temporary credentials cannot exceed this token’s permissions.
[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20parentAccessKeyId%20%3E%20(schema)>)
permission: "admin-read-write"or "admin-read-only"or "object-read-write"or "object-read-only"
Permissions allowed on the credentials.
One of the following:
"admin-read-write"
Link to this property
"admin-read-only"
Link to this property
"object-read-write"
Link to this property
"object-read-only"
Link to this property
[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20permission%20%3E%20(schema)>)
ttlSeconds: number
Lifetime of the temporary credentials in seconds, up to 604800 seconds (7 days).
maximum604800
[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20ttlSeconds%20%3E%20(schema)>)
objects: optional array of string
Optional object paths to scope the credentials to.
[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20objects%20%3E%20(schema)>)
prefixes: optional array of string
Optional prefix paths to scope the credentials to.
[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20prefixes%20%3E%20(schema)>)
##### ReturnsExpand Collapse
errors: array of ResponseInfo { code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: array of string
[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
result: object {accessKeyId, secretAccessKey, sessionToken }
accessKeyId: optional string
ID for new access key.
Link to this property
secretAccessKey: optional string
Secret access key.
Link to this property
sessionToken: optional string
Security token.
Link to this property
[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(network%20schema)%20%3E%20(property)%20result>)
success: true
Whether the API call was successful.
[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
### Create Temporary Access Credentials
HTTP
HTTPTypeScriptPythonGoTerraform
```
curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/r2/temp-access-credentials \
-H 'Content-Type: application/json' \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
-d '{
"bucket": "example-bucket",
"parentAccessKeyId": "example-access-key-id",
"permission": "object-read-write",
"ttlSeconds": 3600
}'
```
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
"string"
],
"result": {
"accessKeyId": "example-access-key-id",
"secretAccessKey": "example-secret-key",
"sessionToken": "example-session-token"
},
"success": true
}
```
##### Returns Examples
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
"string"
],
"result": {
"accessKeyId": "example-access-key-id",
"secretAccessKey": "example-secret-key",
"sessionToken": "example-session-token"
},
"success": true
}
```