---
title: "Access Tokens"
canonical: "https://support.appfire.com/space/SCLI/73368178/Access%20Tokens"
format: markdown
---
# Description
Starting with Bitbucket 5.5 (server and data center), you can use personal access tokens many CLI actions and REST API requests instead of using basic authentication with user and password. See [Bitbucket Personal Access Tokens](https://confluence.atlassian.com/bitbucketserver/personal-access-tokens-939515499.html) for more details. An access token can be specified on the ***token*** parameter on CLI actions related to repositories.
The CLI also supports actions for managing access tokens: add, remove, and getAccessTokenList.
From the UI, go to ***Manage account*** and ***Personal access tokens.***
For Bitbucket Cloud, a similar thing is available called **App passwords** (see below for more information)**. **From a browser: Login → View profile → Settings → App passwords.
For more information, see [Authentication options](https://appfire.atlassian.net/wiki/spaces/ACLI/pages/60563795).
# Permission Table
See the Atlassian [documentation](https://confluence.atlassian.com/bitbucketserver/personal-access-tokens-939515499.html) for the current information. Here is a snapshot of that with some additional information including the valid values for the ***permission*** parameter on ***addAccessToken.***
| | **Project read - ****PROJECT_READ** | **Project write - ****PROJECT_WRITE** | **Project admin - ****PROJECT_ADMIN** |
| --- | --- | --- | --- |
| **Repository read**
**REPO_READ** | :check_mark: Pull and clone repositories | :cross_mark: | :cross_mark: |
| **Repository write**
**REPO_WRITE** | :check_mark: Perform pull request actions
:check_mark: Push, pull, and clone repositories | :check_mark: Perform pull request actions
:check_mark: Push, pull, and clone repositories | :cross_mark: |
| **Repository admin**
**REPO_ADMIN** | :check_mark: Perform pull request actions
:check_mark: Update repository settings and permissions
:check_mark: Push, pull, and clone repositories | :check_mark: Perform pull request actions
:check_mark: Update repository settings and permissions
:check_mark: Push, pull, and clone repositories | :check_mark: Perform pull request actions
:check_mark: Update repository settings and permissions
:check_mark: Update project settings and permissions
:check_mark: Push, pull, clone, and fork repositories
:check_mark: Create repositories |
# Examples
```
--action addAccessToken --name "project-admin" --permission "PROJECT_ADMIN, REPO_ADMIN"
```
# Other Information
- [BSERV-10482](https://jira.atlassian.com/browse/BSERV-10482) - Create admin personal tokens for admin endpoints in Bitbucket Server REST API
# Cloud App Passwords
> App passwords are substitute passwords for a user account which you can use for scripts and integrating tools to avoid putting your real password into configuration files.
For more information, see: [App Passwords](https://confluence.atlassian.com/bitbucket/app-passwords-828781300.html).
> ❌ **Use account name with app passwords**
> ❌
> ❌ Make sure you use your Bitbucket account name and NOT your email address when using App passwords!
- Login → View profile → Settings → App passwords
