API Tokens

An API token lets a script or another tool use Docker Manager as you, with only the actions you grant it. A token can never do more than you can.

Create a tokenCopy Anchor Link

1. Click the round button with your initial at the top right, choose API Tokens and press Create API Token.
2. Enter a Name, for example Backup script, and when it Expires. On a Date accepts dates up to the longest lifetime allowed; when the owner allows it, Never Expires is offered too.
3. Under What the Token May Do, allow only what the script needs.
4. Press Create API Token and confirm it's you.

The token is shown once. Copy it and store it safely. Scripts send it as Authorization: Bearer <token>.

Manage tokensCopy Anchor Link

The API Tokens page lists your active tokens with their expiry and when they were last used; choose Expired, Revoked or All Statuses to see the others. View Permissions lists everything a token may do and where. Revoke stops a token at once.

The owner sees everyone's tokens under Access → API Tokens, with a link to each token's user, and can revoke them there. Token Rules on the same page decides whether API tokens are allowed at all (turning them off pauses every token until you turn them back on), the Longest Lifetime (Days) of new tokens and whether tokens may never expire.

Good to know:

• Everyone except the owner needs the “Create API Tokens” permission.
• Tokens can't manage tokens or do anything only the owner can do, even the owner's own tokens.
• New tokens live at most 90 days, unless the owner changes the Longest Lifetime (Days) under Token Rules.
• Disabling a person's account revokes their tokens.