For AI agents: a documentation index is available at the root level at /llms.txt and /llms-full.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
      • AstroFully-managed data operations, powered by Apache Airflow.
      • Astro Private CloudRun Airflow-as-a-service in your environment.
      • Professional ServicesExpert Airflow services for your enterprise's success.
    • Tools
      • Cosmos
      • Orbiter
      • CLI
      • AI SDK
      • Agents
      • Blueprint
      • UpdatesThe State of Airflow 2026See the insights from over 5,800 data practitioners in the full report. Download Now ➔
  • Customers
  • Docs
    • Insights
      • Blog
      • Webinars
      • Resource Library
      • Events
    • Education
      • Academy
      • What is Airflow?
  • Pricing
Get Started Free
    • Astro CLI
    • Quickstart
    • CLI reference
      • astro completion
      • astro api
      • astro auth
      • astro config
      • astro context
      • astro dbt
      • astro deploy
      • astro deployment
        • astro deployment airflow upgrade
          • astro deployment token create
          • astro deployment token delete
          • astro deployment token list
          • astro deployment token organization-token
          • astro deployment token rotate
          • astro deployment token update
          • astro deployment token workspace-token
        • astro deployment create
        • astro deployment delete
        • astro deployment hibernate
        • astro deployment inspect
        • astro deployment list
        • astro deployment logs
        • astro deployment runtime migrate
        • astro deployment runtime upgrade
        • astro deployment service-account
        • astro deployment team
        • astro deployment update
        • astro deployment user
        • astro deployment wake-up
      • astro dev
      • astro ide
      • astro login
      • astro logout
      • astro organization
      • astro otto
      • astro remote
      • astro run
      • astro team
      • astro telemetry
      • astro user create
      • astro version
      • astro workspace

Product

  • Platform Overview
  • Astro
  • Astro Observe
  • Astro Private Cloud
  • Security & Trust
  • Pricing

Tools & Services

  • Cosmos
  • Docs
  • Professional Services
  • Product Updates

Use Cases

  • AI Ops
  • Data Observability
  • ETL/ELT
  • ML Ops
  • Operational Analytics
  • All Use Cases

Industries

  • Financial Services
  • Gaming
  • Retail
  • Manufacturing
  • Healthcare
  • All Industries

Resources

  • Academy
  • eBooks & Guides
  • Blog
  • Webinars
  • Events
  • The Data Flowcast Podcast
  • All Resources

Airflow

  • What is Airflow
  • Airflow on Astro
  • Airflow 3.0
  • Airflow Upgrades
  • Airflow Use Cases
  • Airflow 2.x End of Life

Company

  • Our Story
  • Customers
  • Newsroom
  • Careers
  • Contact

Support

  • Knowledge Base
  • Status
  • Contact Support
GitHubYouTubeLinkedInx
  • Legal
  • Privacy
  • Terms of Service
  • Consent Preferences

  • Do Not Sell or Share My Personal information
  • Limit the Use Of My Sensitive Personal Information

Apache Airflow®, Airflow, and the Airflow logo are trademarks of the Apache Software Foundation. Copyright © Astronomer 2026. All rights reserved.

LogoLogo
On this page
  • astro deployment workspace-token add
  • Usage
  • Options
  • Example
  • astro deployment workspace-token list
  • Usage
  • Options
  • Output
  • Example
  • astro deployment workspace-token remove
  • Usage
  • Options
  • Example
  • astro deployment workspace-token update
  • Usage
  • Options
  • Example
CLI referenceastro deploymentastro deployment token

astro deployment token workspace-token

Edit this page
Built with
This command is only available on Astro.

Manage Workspace-level API tokens within a specific Deployment. See Assign an Organization or Workspace API token to a Deployment.

astro deployment workspace-token add

Add a Workspace API token to a Deployment and grant it Deployment-specific permissions.

Usage

1astro deployment workspace-token add --deployment-id=<my-deployment-id> --role=DEPLOYMENT_ADMIN --workspace-token-name=<workspace-token-name>

Options

OptionDescriptionValid Values
--deployment-idThe Deployment ID where you want to manage tokens.Any Deployment ID.
-r, --roleThe role the API token has in the Deployment.DEPLOYMENT_ADMIN or a custom role name.
-n, --workspace-token-nameThe Workspace API token name.Any string. If the name contains a space, specify the entire name within quotes "".
--workspace-idThe Workspace to which the Deployment belongs.Any Workspace ID.

Example

1astro deployment workspace-token add --deployment-id=clvduhrvd000008l842ohcpvb --role=DEPLOYMENT_ADMIN --workspace-token-name="My workspace token"

astro deployment workspace-token list

List all Workspace API tokens that are assigned to a specific Deployment.

Usage

1astro deployment workspace-token list --deployment-id=<your-deployment-id> --workspace-id=<your-workspace-ic>

Options

OptionDescriptionValid Values
--deployment-idThe ID of the Deployment to list API tokens for.Any Deployment ID.
--workspace-idThe Workspace to which the Deployment belongs.Any Workspace ID.

Output

OutputDescriptionData Type
IDThe API token ID.String
NAMEThe name of the API token.String
DESCRIPTIONThe API token description.String
SCOPEThe original scope of the API token.String
DEPLOYMENT_ROLEThe API token’s role in the Deployment.String
CREATEDHow long ago the API token was created, in days.String
CREATED BYThe name of the user who created the API token.String

Example

1astro deployment workspace-token list --deployment-id=clvduhrvd000008l842ohcpvb

astro deployment workspace-token remove

Remove a Workspace API token from a Deployment.

Usage

1astro deployment workspace-token remove --deployment-id=<my-deployment-id> --workspace-token-name=<workspace-token-name> --workspace-id=<my-workspace-id>

Options

OptionDescriptionValid Values
--deployment-idThe Deployment ID you want to remove an API token from.Any Deployment ID.
-n, --workspace-token-nameThe name of the Workspace API token you want to remove from the Deployment.Any string.
--workspace-idThe Workspace to which the Deployment belongs.Any Workspace ID.

Example

1astro deployment workspace-token remove --deployment-id=clvduhrvd000008l842ohcpvb --workspace-token-name="My workspace token" --workspace-id=clvdwt4z3000008l60ofb6347

astro deployment workspace-token update

Update the role a Workspace API token has within a Deployment.

Usage

1astro deployment workspace-token update --workspace-token-name=<workspace-token-name> --deployment-id=<my-deployment-id> --role=DEPLOYMENT_ADMIN

Options

OptionDescriptionValid Values
--deployment-idThe Deployment ID you want to scope a Workspace API token to.Any Deployment ID.
-r, --roleThe Deployment role that you want to assign to the token.DEPLOYMENT_ADMIN or a custom role name.
-n, --workspace-token-nameThe name of the Workspace API token you want to update.Any string.
--workspace-idThe Workspace to which the Deployment belongs.Any Workspace ID.

Example

1astro deployment workspace-token update --deployment-id=clvduhrvd000008l842ohcpvb --role=DEPLOYMENT_ADMIN --workspace-token-name="My workspace token"