API Tokens | ibee | Documentation

API tokens scoped to Object Storage provide three credentials: a Bearer Token for the IBEE REST API, and an Access Key ID + Secret Access Key for any S3-compatible tool.

Tokens are managed globally at portal.ibee.ai/a/{project_id}/api-tokens. See API Tokens for the full reference including Billing permissions.

Before you begin

An active IBEE Cloud project with a verified account
At least one bucket (Create a bucket)

Create an Object Storage token

Go to API Tokens

Click API Tokens in the left sidebar under Tools.

Create a token

Click + Create Token. Enter a Name and optional Description.

Set Object Storage permissions

Check Object Storage and choose a permission level:

Permission	What it allows
Admin Read & Write	Create, list, delete buckets; edit bucket configuration; read, write, and list objects
Admin Read only	List buckets; view configuration; read and list objects
Object Read & Write	Read, write, and list objects in specific buckets
Object Read only	Read and list objects in specific buckets

Choose bucket scope:

All buckets (including newly created buckets)
Specific buckets only

Set an expiry (1–365 days, default 90), then click Create Token.

Save credentials

Copy all credentials from the S3 Credentials Created screen:

Credential	Value
Bearer Token	`ibee_v4_...` — for the IBEE REST API
Access Key ID	`AKIA...` — for S3-compatible tools
Secret Access Key	Shown once only — copy now
S3 Endpoint	`https://{project_id}.blob.ibeestorage.com`

The Secret Access Key is shown once only. If you lose it, revoke the token and create a new one.

Use with S3-compatible tools

AWS CLI

$ aws configure set aws_access_key_id AKIAFA2D0EB3E226DA73
$ aws configure set aws_secret_access_key <your-secret-access-key>
$ aws configure set default.region us-east-1
$ 
$ # List buckets
$ aws s3 ls --endpoint-url https://{project_id}.blob.ibeestorage.com

rclone

1 [ibee]
2 type = s3
3 provider = Other
4 access_key_id = AKIAFA2D0EB3E226DA73
5 secret_access_key = <your-secret-access-key>
6 endpoint = https://{project_id}.blob.ibeestorage.com

Revoke a token

In the API Tokens list, click Revoke next to the token. Access is removed immediately.