Grafana Cloud access policy token
ID grafana_cloud_token
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Token of a Grafana Cloud access policy, used by agents and API clients to send and query telemetry. Grafana documents that these tokens start with glc_; the regexp follows the gitleaks rule for the rest (32 to 400 Base64 characters). Service account tokens of a Grafana instance (glsa_) are grafana_service_account_token.
- Parent datatype
- Access token
access_token - Categories
- Secrets and credentials (passwords, keys, tokens)
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 70/100 · missing: examples, mapping (Wikidata, Schema.org, ...), translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- Datadog Sensitive Data Scanner, GitHub secret scanning, Gitleaks
Regular expression
^glc_[A-Za-z0-9+/]{32,400}={0,3}$
Python re syntax.
Examples
| Value | Description |
|---|---|
| glc_ invalid | Prefix without the secret |
Sources
- doc: https://grafana.com/docs/learning-paths/connect-agent-to-agent-observability/create-access-policy-and-token/
- other: https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml
Use this record
- Page URL:
https://registry.apicrafter.io/datatype/grafana_cloud_token - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/secrets/grafana_cloud_token.yamlon GitHub