When deploying your service to a 3rd party provider you will need to generate a service token. Unlike your personal other tokens used by the the Doppler CLI, a service token provides read-only access to a single config.

Let's walk through how to create, use, and revoke a service token.

Creating a Token

To create a token, go to a project and then select a config. From there you want to select the access tab. You should now see a screen similar to this.

Next click on the Generate Service Token button. This will open a dialog where you can name the service token.

After naming the service token and clicking the Generate button, you should see the service token appear. You can revoke this service token at any time.

Once you have copied your service token, it will not be shown again.

Using a Sevice Token

By default the Doppler CLI will look try to configure itself if the environment variable DOPPLER_TOKEN is provided. You can also pass the service token directly to the CLI. This will fetch and save the configured project and config to the CLI's config file for later use.

doppler setup --no-prompt

Revoking a Token

Revoking a service token is non-reversible and will immediately shutdown all access to the config. To revoke a token, click the "Revoke" button on the token you'd like to remove.