Access Tokens
Access Tokens in GraphQL Hive are secure credentials used to authenticate API requests and automate actions without using personal login details.
With Access Tokens, you can perform tasks such as:
- Publish schemas etc. with the Hive CLI
- Report usage data (SDK or HTTP)
- (Soon) Access the public Hive Console GraphQL API for managing resources and export data
Access Tokens in GraphQL Hive support granular permission scopes, allowing you to define exactly what actions a token is allowed to perform and on which resources (project, target, service or app deployment). This helps enforce the principle of least privilege, ensuring tokens only have the access they need - and nothing more.
For example, a CI pipeline that publishes schemas only needs the “Publish Service” scope. There’s no need to grant more permissions.
Important: Treat access tokens like passwords. Keep them secret and revoke them immediately if compromised. Monitor token usage regularly and revoke unused tokens to maintain security.
Create an Access Token
Ensure sufficient permissions
To create an Access Token in GraphQL Hive, you must have the Manage Access Token permission at the
organization level. Tokens are created at the organization level and can be managed (created or
deleted) by any user with sufficient permissions.
Navigate to Access Token Settings
Go to the Settings tab of your organization and open the Access Tokens section.
Click Create new access token.
Enter General Information
Provide a clear title and description to help your team understand the token’s purpose.
Confirm your selection by clicking Next.
Select Permission Scopes
Choose the permissions the token should have.
Tip: Follow the principle of least privilege by only selecting the scopes necessary for the token’s purpose.
Confirm your selection by clicking Next.
Select Resources
Decide if the token should have access to:
- All resources in the organization, or
- Only specific projects/targets/services/apps.
Confirm your selection by clicking Next.
Review and Create
Carefully review all the details—title, description, scopes, and resource assignments.
When you’re ready, click Create Access Token.
Save your Token
After creation, your access token key will be displayed once.
- Copy the token and store it securely (for example, in a secrets manager).
- You won’t be able to view it again.
- Use this token to authenticate with Hive’s CLI or API.
- Never share your token and immediately revoke it if it becomes compromised.
Deleting Access Tokens
Within the Access Token overview, click the three dots icon for opening the context menu.
Within that menu, click the Delete menu item.
Confirm the deletion within the dialog.
Updating Access Tokens
Updating access tokens is currently not possible. Please instead create a new access token with updated permissions, replace the usages of the old access token and then delete the old access token.