--- title: Create Temporary Access Credentials --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/typescript) [R2](https://developers.cloudflare.com/api/typescript/resources/r2) [Temporary Credentials](https://developers.cloudflare.com/api/typescript/resources/r2/subresources/temporary_credentials) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Create Temporary Access Credentials client.r2.temporaryCredentials.create(TemporaryCredentialCreateParams {account\_id, bucket, parentAccessKeyId, 4 more } params, RequestOptionsoptions?): [TemporaryCredentialCreateResponse]() {accessKeyId, secretAccessKey, sessionToken } POST/accounts/{account\_id}/r2/temp-access-credentials Creates temporary access credentials on a bucket that can be optionally scoped to prefixes or objects. ##### Security API Token The preferred authorization scheme for interacting with the Cloudflare API. [Create a token](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/). **Example:**`Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY` ##### ParametersExpand Collapse

params: TemporaryCredentialCreateParams {account\_id, bucket, parentAccessKeyId, 4 more }

account\_id: string Path param: Cloudflare account ID that owns the R2 resource. maxLength32 Link to this property bucket: string Body param: Name of the R2 bucket. Link to this property parentAccessKeyId: string Body param: Access key ID of the parent R2 API token. The temporary credentials cannot exceed this token’s permissions. Link to this property

permission: "admin-read-write"| "admin-read-only"| "object-read-write"| "object-read-only" Body param: Permissions allowed on the credentials.

One of the following: "admin-read-write" Link to this property "admin-read-only" Link to this property "object-read-write" Link to this property "object-read-only" Link to this property

Link to this property ttlSeconds: number Body param: Lifetime of the temporary credentials in seconds, up to 604800 seconds (7 days). maximum604800 Link to this property objects?: Array<string> Body param: Optional object paths to scope the credentials to. Link to this property prefixes?: Array<string> Body param: Optional prefix paths to scope the credentials to. Link to this property

[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(method)%20create%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse

TemporaryCredentialCreateResponse {accessKeyId, secretAccessKey, sessionToken }

accessKeyId?: string ID for new access key. Link to this property secretAccessKey?: string Secret access key. Link to this property sessionToken?: string Security token. Link to this property

[Link to this property](<#(resource)%20r2.temporary_credentials%20%3E%20(model)%20temporary_credential_create_response%20%3E%20(schema)>) ### Create Temporary Access Credentials TypeScript HTTPTypeScriptPythonGoTerraform ``` import Cloudflare from 'cloudflare'; const client = new Cloudflare({ apiToken: process.env['CLOUDFLARE_API_TOKEN'], // This is the default and can be omitted }); const temporaryCredential = await client.r2.temporaryCredentials.create({ account_id: '023e105f4ecef8ad9ca31a8372d0c353', bucket: 'example-bucket', parentAccessKeyId: 'example-access-key-id', permission: 'object-read-write', ttlSeconds: 3600, }); console.log(temporaryCredential.accessKeyId); ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ "string" ], "result": { "accessKeyId": "example-access-key-id", "secretAccessKey": "example-secret-key", "sessionToken": "example-session-token" }, "success": true } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ "string" ], "result": { "accessKeyId": "example-access-key-id", "secretAccessKey": "example-secret-key", "sessionToken": "example-session-token" }, "success": true } ```