---
title: Manage admin tokens
description: Manage admin tokens in your InfluxDB 3 Core instance. An admin token grants access to all actions (CLI commands and API endpoints) for the server.
url: https://docs.influxdata.com/influxdb3/core/admin/tokens/admin/
estimated_tokens: 893
product: InfluxDB 3 Core
version: core
publisher: InfluxData
canonical: https://docs.influxdata.com/influxdb3/core/admin/tokens/admin/
date: '2025-05-29T11:11:28-05:00'
lastmod: '2025-05-29T11:11:28-05:00'
---

Manage InfluxDB 3 Core admin tokens to authorize server actions, `influxdb3` CLI commands, and HTTP API endpoints for your InfluxDB 3 Core instance.
Administrative (*admin*) tokens provide full system access and management capabilities for your InfluxDB 3 Core instance.

Admin tokens can create, edit, and delete other admin tokens.

InfluxDB 3 Core supports two types of admin tokens:

* **Operator token**: A system-generated administrative token with the name `_admin`.

  * Cannot be edited or deleted
  * Never expires
  * Cannot be recreated if lost (future functionality)
  * Can be regenerated using the CLI

* **Named admin token**: User-defined administrative tokens with full admin permissions.

  * Can be created, edited, and deleted
  * Support expiration dates
  * Cannot modify or remove the operator token

An InfluxDB 3 Core instance can have one operator token and unlimited named admin tokens.

## [Create an admin token](/influxdb3/core/admin/tokens/admin/create/)

Use the [`influxdb3 create token --admin` command](/influxdb3/core/reference/cli/influxdb3/create/token/) or the HTTP API [`/api/v3/configure/token/admin`](/influxdb3/core/api/authentication/#operation/PostCreateAdminToken) endpoint to create an [admin token](/influxdb3/core/admin/tokens/admin/) for your InfluxDB 3 Core instance. An admin token grants access to all actions on the server.

##### CLI

```bash
influxdb3 create token --admin
```

#### HTTP API

```bash
curl -X POST "http://localhost:8181/api/v3/configure/token/admin" \
  --header 'Accept: application/json' \
  --header 'Content-Type: application/json'
```

[Read more ](/influxdb3/core/admin/tokens/admin/create/)

## [List admin tokens](/influxdb3/core/admin/tokens/admin/list/)

Use the `influxdb3` CLI or the `/api/v3` HTTP API to list admin tokens for your InfluxDB 3 Core instance. Use the `influxdb3 show tokens` command to list all tokens or use SQL to query token metadata directly from the `system.tokens` table.

##### CLI

```bash
influxdb3 show tokens
```

##### HTTP API

```bash
curl -G \
"http://localhost:8181/api/v3/query_sql" \
--data-urlencode "db=_internal" \
--data-urlencode "q=SELECT * FROM system.tokens WHERE permissions = '*:*:*'" \
--header 'Accept: application/json' \
--header "Authorization: Bearer AUTH_TOKEN"
```

[Read more ](/influxdb3/core/admin/tokens/admin/list/)

## [Regenerate an admin token](/influxdb3/core/admin/tokens/admin/regenerate/)

Use the [`influxdb3 create token --admin` command](/influxdb3/core/reference/cli/influxdb3/create/token/) or the HTTP API [`/api/v3/configure/token/admin/regenerate`](/influxdb3/core/api/authentication/#operation/PostRegenerateAdminToken) endpoint to regenerate an [operator token](/influxdb3/core/admin/tokens/admin/) for your InfluxDB 3 Core instance. Regenerating an operator token deactivates the previous token.

##### CLI

```bash
influxdb3 create token --admin \
  --regenerate
  OPERATOR_TOKEN
```

#### HTTP API

```bash
curl -X POST "http://localhost:8181/api/v3/configure/token/admin/regenerate" \
  --header 'Authorization Bearer OPERATOR_TOKEN' \
  --header 'Accept: application/json'
  --header 'Content-Type: application/json'
```

[Read more ](/influxdb3/core/admin/tokens/admin/regenerate/)

## [Use a preconfigured admin token](/influxdb3/core/admin/tokens/admin/preconfigured/)

Start InfluxDB 3 Core with a preconfigured “offline” admin token file. If no admin tokens already exist, InfluxDB automatically creates an admin token using the provided admin token file.

[tokens](/influxdb3/core/tags/tokens/)