Create and Control API Tokens for Users and Service Accounts
For the complete documentation index, see llms.txt. For a full content snapshot, see llms-full.txt. Append.mdto anykestra.io/docs/*URL for plain Markdown.
Available on:Enterprise EditionCloud
API tokens grant programmatic access to the Kestra API for users and service accounts.
Where you can use API tokens
Pass a token as a Bearer header to authenticate any Kestra API call — from a CI/CD pipeline, a custom application, or any of the following:
User API tokens
User tokens are created via Settings → API Tokens or the user avatar menu. Each token has a name, optional description, and maximum age. Leaving max age blank creates a non-expiring token. Extended mode resets the expiry on each use. The token is shown only at creation.
Service account API tokens
Service account tokens are created from IAM → Service Accounts: open the service account, select the API Tokens tab, and click Create. The form fields and expiry options are the same as for user tokens.
API request authentication
To authenticate your custom API calls, pass a Bearer token to the request’s Authorization header. The following example triggers a flow execution via the Kestra API:
curl -X POST http://localhost:8080/api/v1/executions/dev/hello-world \-H "Authorization: Bearer YOUR_API_TOKEN"Was this page helpful?