With InfluxDB 3 Clustered, InfluxDB Management API endpoints require the following credential:

• Authorization MANAGEMENT_TOKEN: the Authorization HTTP header with a management token.

  See how to create a management token.

  By default, management tokens in InfluxDB 3 are short-lived tokens issued by an OAuth2 identity provider that grant a specific user administrative access to your InfluxDB cluster. However, for automation purposes, you can manually create management tokens that authenticate directly with your InfluxDB cluster and do not require human interaction with your identity provider.

The following example script shows how to use curl to make database and token management requests:

 #!/bin/bash

 # Usage:
 # Note the leading space in the command below to keep secrets out of the shell history
 #
 # ```
 #  MANAGEMENT_TOKEN=<MANAGEMENT_TOKEN> ./scripts/test_http_api_v0_endpoints.sh
 # ```

 # Env var validation
 if [ -z "${MANAGEMENT_TOKEN}" ]; then
   echo "
 [Error]: ❌
   \$MANAGEMENT_TOKEN env var is required.
     "
     exit 1
 fi

HOST="https://cluster-host.com"

 # Database request functions
 list_databases () {
   local response=$( \
     curl \
       --location "$HOST/api/v0/databases" \
       --header "Accept: application/json" \
       --header "Authorization: Bearer $MANAGEMENT_TOKEN" \
   )
   echo "$response"
 }

 create_database () {
   local databaseName=$1
   local response=$( \
     curl \
       --location "$HOST/api/v0/databases" \
       --header "Accept: application/json" \
       --header 'Content-Type: application/json' \
       --header "Authorization: Bearer $MANAGEMENT_TOKEN" \
       --data '{
         "name": "'$databaseName'",
         "maxTables": 75,
         "maxColumnsPerTable": 90,
         "retentionPeriod": 600000000000,
         "partitionTemplate": [
           {
             "type": "tag",
             "value": "abc"
           },
           {
             "type": "bucket",
             "value": {
               "tagName": "def",
               "numberOfBuckets": 5
             }
           }
         ]
       }' \
   )
   echo "$response"
 }

 update_database () {
   local databaseName=$1
   local response=$( \
     curl \
       --location "$HOST/api/v0/databases/$databaseName" \
       --request PATCH \
       --header "Accept: application/json" \
       --header 'Content-Type: application/json' \
       --header "Authorization: Bearer $MANAGEMENT_TOKEN" \
       --data '{
         "maxTables": 150,
         "maxColumnsPerTable": 180,
         "retentionPeriod": 1200000000000
       }' \
   )
   echo "$response"
 }

 delete_database () {
   local databaseName=$1
   local response=$( \
     curl \
       --location "$HOST/api/v0/databases/$databaseName" \
       --request DELETE \
       --header "Accept: application/json" \
       --header "Authorization: Bearer $MANAGEMENT_TOKEN" \
   )
   echo "$response"
 }

 # Token request functions
 list_tokens () {
   local response=$( \
     curl \
       --location "$HOST/api/v0/tokens" \
       --header "Accept: application/json" \
       --header "Authorization: Bearer $MANAGEMENT_TOKEN" \
   )
   echo "$response"
 }

 create_token () {
   local response=$( \
     curl \
       --location "$HOST/api/v0/tokens" \
       --header "Accept: application/json" \
       --header 'Content-Type: application/json' \
       --header "Authorization: Bearer $MANAGEMENT_TOKEN" \
       --data '{
         "description": "my test token",
         "permissions": [
           {
             "action": "write",
             "resource": "database_one"
           },
           {
             "action": "read",
             "resource": "database_two"
           }
         ]
       }' \
   )
   echo "$response"
 }

 get_token () {
   local token_id=$1
   local response=$( \
     curl \
       --location "$HOST/api/v0/tokens/$tokenId" \
       --header "Accept: application/json" \
       --header "Authorization: Bearer $MANAGEMENT_TOKEN" \
   )
   echo "$response"
 }

 update_token () {
   local token_id=$1
   local response=$( \
     curl \
       --location "$HOST/api/v0/tokens/$tokenId" \
       --request PATCH \
       --header "Accept: application/json" \
       --header 'Content-Type: application/json' \
       --header "Authorization: Bearer $MANAGEMENT_TOKEN" \
       --data '{
         "description": "my updated test token",
         "permissions": [
           {
             "action": "database_one",
             "resource": "read"
           }
         ]
       }' \
   )
   echo "$response"
 }

 delete_token () {
   local token_id=$1
   local response=$( \
     curl \
       --location "$HOST/api/v0/tokens/$tokenId" \
       --request DELETE \
       --header "Accept: application/json" \
       --header "Authorization: Bearer $MANAGEMENT_TOKEN" \
   )
   echo "$response"
 }


 # Test database endpoints
 databaseName="test_database_$RANDOM"

 printf "\n🏗️   Creating database...  🏗️\n\n"
 response="$(create_database $databaseName)"
 echo $response | jq
 printf "\n🏗️   Creating database successful  🏗️\n\n"

 printf "\n⬆️   Updating database...  ⬆️\n\n"
 response="$(update_database $databaseName)"
 echo $response | jq
 printf "\n⬆️   Updating database successful  ⬆️\n\n"

 printf "\n⬇️   Listing databases...  ⬇️\n\n"
 response="$(list_databases)"
 echo $response | jq
 printf "\n⬇️   Listing databases successful  ⬇️\n\n"

 printf "\n🗑️   Deleting database...  🗑️\n\n"
 response="$(delete_database $databaseName)"
 echo $response | jq
 printf "\n🗑️   Deleting database successful  🗑️\n\n"


 # Test token endpoints
 printf "\n🏗️   Creating token...  🏗️\n\n"
 response="$(create_token)"
 echo $response | jq
 tokenId=$(echo $response | jq '.id')
 printf "\n🏗️   Creating token successful  🏗️\n\n"

 printf "\n⬇️   Getting token...  ⬇️\n\n"
 response="$(get_token $tokenId)"
 echo $response | jq
 printf "\n⬇️   Getting token successful  ⬇️\n\n"

 printf "\n⬆️   Updating token...  ⬆️\n\n"
 response="$(update_token $tokenId)"
 echo $response | jq
 printf "\n⬆️   Updating token successful  ⬆️\n\n"

 printf "\n📋   Listing tokens...  📋\n\n"
 response="$(list_tokens)"
 echo $response | jq
 printf "\n📋   Listing tokens successful  📋\n\n"

 printf "\n🗑️   Deleting token...  🗑️\n\n"
 response="$(delete_token $tokenId)"
 echo $response | jq
 printf "\n🗑️   Deleting token successful  🗑️\n\n"
     ```

Manage database read/write tokens for a cluster

Manage databases for a cluster

Manage tables in a database