---
id: "gitlab_deploy_token"
kind: "datatype"
status: "draft"
is_pii: false
categories: ["secrets"]
langs: ["common"]
quality: 70
url: "https://registry.apicrafter.io/datatype/gitlab_deploy_token"
---

# GitLab deploy token (`gitlab_deploy_token`)

> **Draft.** Draft records have not been reviewed yet and may be incomplete or wrong; do not treat them as authoritative for legal or compliance decisions.

Token that gives read or write access to the repositories, container registry or package registry of one GitLab project or group, without a user account. GitLab gives these tokens the prefix gldt-, which cannot be configured. GitLab does not document the length; the regexp follows the gitleaks rule (20 characters after the prefix).

- Parent datatype: `access_token`
- Personal data (PII): no
- Categories: Secrets and credentials (passwords, keys, tokens) (secrets)
- Countries: global
- Languages: Common to most languages (common)
- Classification: identifier

## Detection

Regular expression (Python `re`):

```
^gldt-[A-Za-z0-9_-]{20}$
```

## Examples

- `gldt-` (invalid example) — Prefix without the token

## Supported by tools

- `datadogsds`
- `gitguardian`
- `githubsecretscanning`
- `gitleaks`

## Sources

- doc: <https://docs.gitlab.com/security/tokens/>
- other: <https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml>

## Quality

Score 70/100. Missing: examples, mapping (Wikidata, Schema.org, ...), translation.

JSON: <https://registry.apicrafter.io/api/v1/datatypes/gitlab_deploy_token.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/secrets/gitlab_deploy_token.yaml>