Cloudflare lets non-admin members self-serve create Account API tokens via CLI, API and Terraform
irvinebroque · x · 2026-10-02
Cloudflare's new changelog removes the Super Administrator requirement for Account API token creation. Members with the new API Token Provisioning role can now self-serve create Account API tokens via Dashboard, API, Terraform, or the CF CLI.
Key points:
- Delegated creation: admins grant the role via dashboard/API/Terraform, freeing platform teams from admin bottlenecks.
- OAuth support: OAuth clients requesting the accountapitokens:create scope, starting with Cloudflare CLI, can mint tokens.
- Permission ceiling: tokens are capped at the creator's existing permissions (or OAuth scopes).
- Attribution: tokens carry creator metadata; admins see all tokens, provisioning-role members only their own.
The poster notes you can install the new CLI with npm i -g cf and create tokens straight from the command line.
More from Infra
- Modal launches BYOC 2.0 to keep cloud coding agents' sensitive data inside your account — charles_irl · 2026-10-02
- GPT-6 Astra Ultrafast launches on NVIDIA Blackwell with up to 8x faster tokens — nvidia · 2026-10-02
- Google's Project Suncatcher prototype satellite is now in orbit — Gaiden206 · 2026-10-02
- OpenAI's GPT-6 Astra Ultrafast Delivers Up to 8x Faster Token Generation on NVIDIA Blackwell — NVIDIA Blog · 2026-10-02
- Ben Lorica: The AI data problem moved downstream, from finding data to making it usable — bigdata · 2026-10-02
- California man arrested for allegedly smuggling over $300M in AI servers to China — Polymarket · 2026-10-02