Verified:GitHub

glab-token

Create, list, revoke, and rotate GitLab tokens across users, groups, and projects.

12|2|Updated Apr 21, 2026

Search Tags:#security #authentication #cli #gitlab #glab #token-management #api-tokens

One-click install

npx skills add https://github.com/haomingz/kimi-skills --skill glab-token-haomingz

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: glab-token
Source: https://github.com/haomingz/kimi-skills/tree/main/skills/gitlab-cli-guide/glab-token
Command: npx skills add https://github.com/haomingz/kimi-skills --skill glab-token-haomingz

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

GitLab tokens (personal, project, and group) are essential for authentication and automation, but their lifecycle is easy to mishandle without a clear workflow, increasing security risk.

Core Features & Use Cases

Create, list, revoke, and rotate tokens across users, groups, and projects to maintain secure access.
Audit token lifecycles to enforce expiration, scopes, and revocation policies across multiple entities.
Use cases include CI/CD automation, community scripts, and admin token management for multi-repo environments.

Quick Start

Create a token with glab token create and manage it later with glab token list and glab token revoke.

Frequently Asked Questions about glab-token

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I manage GitLab tokens across multiple projects and groups from the command line?▼

Rotate GitLab API tokens through the CLI to enforce expiration policies and maintain secure access. The rotate command updates tokens across users, groups, and projects, preventing authentication failures in CI/CD workflows.

What is the best way to automate GitLab token lifecycle controls for CI/CD workflows?▼

The CLI manages personal, project, and group GitLab tokens for CI/CD automation and admin tasks. It enforces secure access by applying repository-scoped permissions and lifecycle controls across multiple GitLab entities.

Can I revoke and rotate GitLab API tokens for multiple entities using a single tool?▼

Yes, the CLI creates, lists, revokes, and rotates GitLab tokens across users, groups, and projects. It applies repository-scoped permissions to enforce secure access and token lifecycle controls.

Why do I need to rotate GitLab personal and project tokens regularly?▼

Does the glab token CLI support repository-scoped permissions for project tokens?▼

The CLI applies repository-scoped permissions to GitLab tokens created for projects. This restricts API access appropriately for CI/CD automation and admin tasks across multiple repositories.