API tokens give you programmatic access to IBEE Cloud services. A token can be scoped to Object Storage, Billing, or both. Tokens with Object Storage access include S3 credentials for use with AWS CLI, rclone, and any S3-compatible tool.
In the IBEE Cloud portal, click API Tokens in the left sidebar under Tools.
This opens portal.ibee.ai/a/{project_id}/api-tokens.
Select at least one permission scope. Expand each to configure sub-permissions.
When Object Storage is checked, select a storage permission level:
Then choose which buckets the token applies to:
Selecting Object Storage generates S3 credentials alongside the Bearer Token. The Token will include preview at the bottom of the modal confirms:
When Billing is checked, select a billing permission level:
Tokens appear in the API Tokens list with the following columns:
Click Revoke in the Actions column. Revoked tokens lose access immediately and cannot be restored — create a new token if access is needed again.
Create Token button is disabled At least one permission scope (Object Storage or Billing) must be selected.
Secret Access Key not saved The Secret Access Key is only shown once. Revoke the token and create a new one.
S3 authentication failing Verify you are using:
https://{project_id}.blob.ibeestorage.comToken expired Tokens expire after the number of days set at creation (default 90, max 365). Revoke the old token and create a new one with a longer expiry if needed.