{ "opencollection": "1.0.0", "info": { "name": "Grafana HTTP Access Tokens API", "version": "11.0.0" }, "request": { "auth": { "type": "bearer", "token": "{{bearerToken}}" } }, "items": [ { "info": { "name": "Tokens", "type": "folder" }, "items": [ { "info": { "name": "Grafana Get License Token", "type": "http" }, "http": { "method": "GET", "url": "https://{instance}.grafana.net/api/licensing/token" }, "docs": "This API operation retrieves the current license token information from a Grafana instance. When invoked with a GET request to the /licensing/token endpoint, it returns details about the active licensing configuration, which may include token metadata, validity status, expiration dates, and associated entitlements or features enabled by the license. This endpoint is typically used by administrators to verify licensing status, check token validity, or retrieve license information for audit and co" }, { "info": { "name": "Grafana Post License Token", "type": "http" }, "http": { "method": "POST", "url": "https://{instance}.grafana.net/api/licensing/token", "body": { "type": "json", "data": "{}" } }, "docs": "This API operation allows administrators to activate or update a Grafana Enterprise license by submitting a license token via a POST request to the /licensing/token endpoint. When called, it accepts a license token string in the request body, validates the token with Grafana's licensing service, and applies the license to the Grafana instance if valid. This operation is typically used during initial Enterprise setup or when renewing an existing license, and it requires administrative privileges " }, { "info": { "name": "Grafana Delete License Token", "type": "http" }, "http": { "method": "DELETE", "url": "https://{instance}.grafana.net/api/licensing/token", "body": { "type": "json", "data": "{}" } }, "docs": "This API operation removes the currently active license token from a Grafana instance. When executed, it deletes the stored license information, effectively reverting the instance to an unlicensed state or to use any default licensing configuration. This endpoint requires appropriate administrative permissions and is typically used when decommissioning a licensed Grafana installation, switching to a different license, or troubleshooting license-related issues. The DELETE method ensures complete " }, { "info": { "name": "Grafana Post Renew License Token", "type": "http" }, "http": { "method": "POST", "url": "https://{instance}.grafana.net/api/licensing/token/renew" }, "docs": "This API operation is used to renew an existing Grafana Enterprise license token. When invoked via a POST request to the /licensing/token/renew endpoint, it initiates the license token renewal process, typically validating the current token and requesting a fresh token from the Grafana licensing server. This operation is essential for maintaining continuous access to Grafana Enterprise features by ensuring the license remains valid and up-to-date. Authentication and appropriate permissions are r" }, { "info": { "name": "Grafana List Tokens", "type": "http" }, "http": { "method": "GET", "url": "https://{instance}.grafana.net/api/serviceaccounts/:serviceAccountId/tokens", "params": [ { "name": "serviceAccountId", "value": "", "type": "path" } ] }, "docs": "Returns a list of all tokens associated with a specific service account in Grafana, identified by the serviceAccountId parameter. This endpoint allows administrators and authorized users to view all authentication tokens that have been generated for a particular service account, which is useful for managing API access, monitoring token usage, and maintaining security by auditing which tokens are currently active or have been created for automated integrations and external services." }, { "info": { "name": "Grafana Create Token", "type": "http" }, "http": { "method": "POST", "url": "https://{instance}.grafana.net/api/serviceaccounts/:serviceAccountId/tokens", "params": [ { "name": "serviceAccountId", "value": "", "type": "path" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Creates a new API token for a specified service account in Grafana by sending a POST request to the endpoint with the service account ID as a path parameter. This operation generates authentication tokens that allow service accounts to interact with Grafana's API programmatically, enabling automated workflows, integrations, and machine-to-machine communication. The request typically requires specifying token properties such as name, role, and optionally an expiration date, and returns the newly " }, { "info": { "name": "Grafana Delete Token", "type": "http" }, "http": { "method": "DELETE", "url": "https://{instance}.grafana.net/api/serviceaccounts/:serviceAccountId/tokens/:tokenId", "params": [ { "name": "tokenId", "value": "", "type": "path" }, { "name": "serviceAccountId", "value": "", "type": "path" } ] }, "docs": "Deletes a specific service account token in Grafana by providing both the service account ID and the token ID as path parameters. This operation permanently removes the authentication token, immediately revoking its access to the Grafana instance. Once deleted, any applications or services using this token will no longer be able to authenticate, making this a critical operation for token lifecycle management and security hygiene when rotating credentials or removing access for service accounts." }, { "info": { "name": "Grafana Admin Get User Auth Tokens", "type": "http" }, "http": { "method": "GET", "url": "https://{instance}.grafana.net/api/admin/users/:user_id/auth-tokens", "params": [ { "name": "user_id", "value": "", "type": "path" } ] }, "docs": "Retrieves a list of authentication tokens associated with a specific user account in Grafana. This administrative endpoint requires admin privileges and allows system administrators to view all active auth tokens that have been generated for a particular user identified by their user ID. The operation returns token metadata including creation dates, last used timestamps, and token names, which helps administrators audit user access, monitor authentication activity, and identify potentially unaut" }, { "info": { "name": "Grafana Admin Revoke User Auth Token", "type": "http" }, "http": { "method": "POST", "url": "https://{instance}.grafana.net/api/admin/users/:user_id/revoke-auth-token", "params": [ { "name": "user_id", "value": "", "type": "path" } ], "body": { "type": "json", "data": "{}" } }, "docs": "This API operation allows a Grafana administrator to forcibly revoke a specific authentication token for a given user by making a POST request to the endpoint with the target user's ID. When executed, it invalidates the specified auth token, effectively logging out that user from any session using that particular token, which is useful for security purposes such as when a token may have been compromised or when an administrator needs to terminate a user's access immediately without affecting oth" }, { "info": { "name": "Grafana Get Cloud Migration Token", "type": "http" }, "http": { "method": "GET", "url": "https://{instance}.grafana.net/api/cloudmigration/token" }, "docs": "Retrieves the cloud migration token for a Grafana instance, which is used to authenticate and authorize the migration of dashboards, data sources, and other resources from a self-hosted or on-premise Grafana installation to Grafana Cloud. This token serves as a secure credential that enables the migration service to access and transfer configuration data between environments, typically generated when initiating a cloud migration process and required for establishing a trusted connection between " }, { "info": { "name": "Grafana Create Cloud Migration Token", "type": "http" }, "http": { "method": "POST", "url": "https://{instance}.grafana.net/api/cloudmigration/token" }, "docs": "Creates a new cloud migration token in Grafana that enables secure data transfer and authentication between a self-hosted Grafana instance and Grafana Cloud during migration operations. This endpoint generates a temporary authentication token that authorizes the migration service to access and migrate dashboards, data sources, alerts, and other Grafana resources from the source instance to the cloud destination. The token serves as a security credential to establish a trusted connection and shou" }, { "info": { "name": "Grafana Delete Cloud Migration Token", "type": "http" }, "http": { "method": "DELETE", "url": "https://{instance}.grafana.net/api/cloudmigration/token/:uid", "params": [ { "name": "uid", "value": "", "type": "path", "description": "UID of a cloud migration token" } ] }, "docs": "Deletes a specific cloud migration token identified by its unique identifier (UID) from Grafana. This operation permanently removes the authentication token that was previously created to facilitate data migration to Grafana Cloud. Once deleted, the token can no longer be used for migration purposes, and any ongoing migration processes using this token will be invalidated. This is typically used when a migration is complete, a token has been compromised, or when cleaning up unused credentials fo" }, { "info": { "name": "Grafana Get User Auth Tokens", "type": "http" }, "http": { "method": "GET", "url": "https://{instance}.grafana.net/api/user/auth-tokens" }, "docs": "This API operation retrieves a list of authentication tokens associated with the currently authenticated user in Grafana. When called via a GET request to the /user/auth-tokens endpoint, it returns information about active auth tokens that have been generated for the user's account, typically including details such as token IDs, creation timestamps, last used dates, and expiration information. This allows users to view and manage their active sessions and API tokens for security and access contr" }, { "info": { "name": "Grafana Revoke User Auth Token", "type": "http" }, "http": { "method": "POST", "url": "https://{instance}.grafana.net/api/user/revoke-auth-token", "body": { "type": "json", "data": "{}" } }, "docs": "This API operation allows for the revocation of a specific authentication token associated with a user in Grafana. When invoked via a POST request to the /user/revoke-auth-token endpoint, it invalidates the specified auth token, effectively logging out the user from any session using that particular token. This is useful for security purposes when a user wants to manually terminate access from a specific device or session, or when an administrator needs to force a logout. The operation requires " } ] } ], "bundled": true }