--- title: Tokens --- ## Token Resource Rancher has an imperative API resource `tokens.ext.cattle.io` that allows you to generate tokens for authenticating with Rancher. ```sh kubectl api-resources --api-group=ext.cattle.io ``` To get a description of the fields and structure of the Token resource, run: ```sh kubectl explain tokens.ext.cattle.io ``` ## Creating a Token :::caution The Token value is only returned once in the `status.value` field. ::: Since Rancher v2.13.0 the `status.bearerToken` now contains a fully formed and ready-to-use Bearer token that can be used to authenticate to [Rancher API](../v3-rancher-api-guide.md). Only a **valid and active** Rancher user can create a Token. Otherwise, you will get an error displayed (`Error from server (Forbidden)...`) when attempting to create a Token. ```bash kubectl create -o jsonpath='{.status.value}' -f -<