---
name: "glab-artifact-registry-get-token"
section: "1"
platform: "linux"
package: "glab"
version: "1.126.0-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/glab-artifact-registry-get-token"
---

# glab-artifact-registry-get-token(1)

Get a short-lived access token for the GitLab Artifact Registry. (EXPERIMENTAL)

## NAME

glab-artifact-registry-get-token - Get a short-lived access token for the GitLab Artifact Registry. (EXPERIMENTAL)

## SYNOPSIS

**glab artifact-registry get-token \[flags\]**

## DESCRIPTION

Exchange a GitLab credential for a short-lived access token scoped to the GitLab Artifact Registry. The command prints the bare token to stdout, so a shell can capture it directly, for example to feed **docker login**.

Prerequisites:

- •

  A GitLab Enterprise Edition (EE) instance on GitLab 19.1 or later.

- •

  Token exchange enabled on the instance (the **gate\_token\_exchange\_endpoint** feature flag).

This feature is an experiment and is not ready for production use. It might be unstable or removed at any time. For more information, see https://docs.gitlab.com/policy/development\_stages\_support/.

## OPTIONS

**--duration**=15m0s\
 	How long the token should remain valid. Must be between 1s and 12h0m0s.

**--hostname**=""\
 	GitLab hostname to request the token from. Defaults to the configured GitLab instance.

**--jq**=""\
 	Filter JSON output with a jq expression.

**-F**, **--output**="text"\
 	Format output as: text, json.

## OPTIONS INHERITED FROM PARENT COMMANDS

**-h**, **--help**\[=false\]\
 	Show help for this command.

## EXAMPLE

```
# Get a token using the default duration
glab artifact-registry get-token
# Get a token valid for one hour
glab artifact-registry get-token --duration 1h
# Get a token as JSON, including its expiry
glab artifact-registry get-token --output json
```

## SEE ALSO

**[glab-artifact-registry(1)](/glab-artifact-registry/1.md)**