PlanetScale CLI commands - service-token

Use the PlanetScale CLI to create development branches, open deploy requests, and make non-blocking schema changes directly from your terminal.

Getting Started

Make sure to first set up your PlanetScale developer environment. Once you've installed the pscale CLI, you can interact with PlanetScale and manage your databases straight from the command line.

The service-token command

This command allows you to create, list, and manage access for service tokens.


pscale service-token <SUB-COMMAND> <FLAG>

Available sub-commands

Sub-commandSub-command flagsDescription
add-access <TOKEN_ID> <PERMISSION> <PERMISSION>--database <DATABASE_NAME>Add individual permissions to the specified service token in the organization
createCreate a service token for the organization
delete <TOKEN_ID>Delete an entire service token in an organization
delete-access <TOKEN_ID> <PERMISSION> <PERMISSION>--database <DATABASE_NAME>Delete individual permissions granted to a service token in the organization
listList the IDs of an organization's service tokens
show-accessFetch a service token and its accesses

Sub-command flag descriptions

Some of the sub-commands have additional flags unique to the sub-command. This section covers what each of those does. See the above table for which context.

Sub-command flagDescriptionApplicable sub-commands
--database <DATABASE_NAME>The database this project is using.add-access, delete-access

Available flags

-h, --helpView help for service-token command
--org <ORGANIZATION_NAME>The organization for the current user

Global flags

--api-token <TOKEN>The API token to use for authenticating against the PlanetScale API.
--api-url <URL>The base URL for the PlanetScale API. Default is
--config <CONFIG_FILE>Config file. Default is $HOME/.config/planetscale/pscale.yml.
--debugEnable debug mode.
-f, --format <FORMAT>Show output in a specific format. Possible values: human (default), json, csv.
--no-colorDisable color output.
--service-token <TOKEN>The service token for authenticating.
--service-token-id <TOKEN_ID>The service token ID for authenticating.


The service-token command with add-access sub-command and --database flag


pscale service-token add-access <TOKEN_ID> read_branch delete_branch create_branch --database <DATABASE_NAME_2>

This will add the following permissions to the specified access token: read_branch, delete_branch, create_branch. The output will show the updated permissions on all databases.

You can find a list of all permissions in the PlanetScale API documentation.


DATABASE_NAMEapprove_deploy_request, connect_branch, connect_production_branch, create_branch, create_comment, create_deploy_request, delete_branch, read_branch, read_comment, read_deploy_request
DATABASE_NAME_2read_branch, delete_branch, create_branch

Need help?

Get help from the PlanetScale support team, or join our GitHub discussion board to see how others are using PlanetScale.

Was this page useful?
Last updated on
Help us improve this page