sincecutoff.com
/v1/json /v1/md llms.txt
← all changes

turso auth API tokens support org-wide scopes

Introduced 2026-10-07 · score 0.96

HOW TO USE IT

When creating an organization-wide token with explicit permissions, run `turso auth api-tokens mint` with `--org` and one or more `--scope` flags, omitting `--group`. Use `group:create`, `group:delete`, or `org:read` only without `--group`; `--full-access` expands to the group-level scope set.

turso auth api-tokens mint <token-name> --org <organization-slug> --scope group:create --scope group:delete --scope org:read

WHY THIS HELPS

Create or review an organization-wide API token with explicit permissions.

REQUIREMENTS AND LIMITATIONS

  • Version: v1.0.34
  • <token-name> (required): Name of the API token.
  • --org <organization-slug>: Restricts the token to this organization; omitted value defaults to the selected organization.
  • --scope <permission>: Repeatable permission scope. Organization-only values: `group:create`, `group:delete`, `org:read`; these are invalid with `--group`.
  • --read-only: Shorthand scope preset. Mutually exclusive with `--scope` and `--full-access`.
  • --full-access: Shorthand for full access; mutually exclusive with `--scope` and `--read-only`. Its scope set is group-level only.
  • --group <group>: Restricts token to a group within `--org`; requires at least one scope and rejects organization-level scopes. Omit for an organization-wide token.
  • Prerequisite: The CLI obtains an authenticated Turso client before minting the token; authenticate with `turso auth login` if needed.
  • The org-level scopes `group:create`, `group:delete`, and `org:read` are rejected with `--group`.
  • The `full-access` label matches the group-level set only, as the platform expands it.
  • Docs conflict: Current Turso CLI docs list `--scope` as group-scoped and omit the organization-level scope values, differing from the v1.0.34 release behavior. https://github.com/tursodatabase/turso-docs/blob/main/cli/auth/api-tokens/mint.mdx

FIRST-PARTY EVIDENCE

Check the installed version and the source before using it. Entry JSON

Report a problem with this card