Cloudflare One, Access - Organize and authorize Access service tokens with tags

<p>You can now assign key-value tags to <a href="https://developers.cloudflare.com/cloudflare-one/access-controls/service-credentials/service-tokens/#tag-service-tokens">Access service tokens</a> and use those tags to organize credentials or control application access. Each token supports up to five tags, such as <code>environment: production</code> or <code>team: payments</code>.</p> <p>Add or edit tags when you create or update a token in the dashboard or service token API. You can search and filter by tag on the <strong>Service Tokens</strong> page. Tags also appear in <a href="https://developers.cloudflare.com/resource-tagging/">Resource Tagging</a>, where you can query them alongside other tagged resources.</p> <p>The <strong>Service Token Tag</strong> policy selector matches valid tokens with an exact key-value pair. Use it in a <strong>Service Auth</strong> policy to authorize tokens by environment or team without listing each token individually. For example, this API policy configuration accepts valid tokens tagged <code>environment: production</code>:</p> <figure class="nb-code-figure" data-nb-lang="json"><pre class="astro-code astro-code-themes github-light github-dark nb-shiki-c6xiwz" tabindex="0" data-language="json" data-nb-lang="json"><code><span class="line"><span class="nb-shiki-140thh">{</span></span> <span class="line"><span class="nb-shiki-dzsirb"> "name"</span><span class="nb-shiki-140thh">: </span><span class="nb-shiki-mdbnqw">"Production service tokens"</span><span class="nb-shiki-140thh">,</span></span> <span class="line"><span class="nb-shiki-dzsirb"> "decision"</span><span class="nb-shiki-140thh">: </span><span class="nb-shiki-mdbnqw">"non_identity"</span><span class="nb-shiki-140thh">,</span></span> <span class="line"><span class="nb-shiki-dzsirb"> "include"</span><span class="nb-shiki-140thh">: [</span></span> <span class="line"><span class="nb-shiki-140thh"> {</span></span> <span class="line"><span class="nb-shiki-dzsirb"> "service_token_tag"</span><span class="nb-shiki-140thh">: {</span></span> <span class="line"><span class="nb-shiki-dzsirb"> "key"</span><span class="nb-shiki-140thh">: </span><span class="nb-shiki-mdbnqw">"environment"</span><span class="nb-shiki-140thh">,</span></span> <span class="line"><span class="nb-shiki-dzsirb"> "value"</span><span class="nb-shiki-140thh">: </span><span class="nb-shiki-mdbnqw">"production"</span></span> <span class="line"><span class="nb-shiki-140thh"> }</span></span> <span class="line"><span class="nb-shiki-140thh"> }</span></span> <span class="line"><span class="nb-shiki-140thh"> ]</span></span> <span class="line"><span class="nb-shiki-140thh">}</span></span></code></pre></figure> <p>For setup instructions, refer to <a href="https://developers.cloudflare.com/cloudflare-one/access-controls/service-credentials/service-tokens/#tag-service-tokens">Tag service tokens</a> and <a href="https://developers.cloudflare.com/cloudflare-one/access-controls/service-credentials/service-tokens/#authorize-service-tokens-by-tag">Authorize service tokens by tag</a>.</p>