npm-token @10.9.2
Manage your authentication tokensTable of contents
Synopsis
npm token list
npm token revoke <id|token>
npm token create [--read-only] [--cidr=list]
Note: This command is unaware of workspaces.
Description
This lets you list, create and revoke authentication tokens.
- npm token list: Shows a table of all active authentication tokens. You can request this as JSON with- --jsonor tab-separated values with- --parseable.
Read only token npm_1f… with id 7f3134 created 2017-10-21
Publish token npm_af…  with id c03241 created 2017-10-02
with IP Whitelist: 192.168.0.1/24
Publish token npm_… with id e0cf92 created 2017-10-02
- 
npm token create [--read-only] [--cidr=<cidr-ranges>]: Create a new authentication token. It can be--read-only, or accept a list of CIDR ranges with which to limit use of this token. This will prompt you for your password, and, if you have two-factor authentication enabled, an otp.Currently, the cli can not generate automation tokens. Please refer to the docs website for more information on generating automation tokens. 
Created publish token a73c9572-f1b9-8983-983d-ba3ac3cc913d
- npm token revoke <token|id>: Immediately removes an authentication token from the registry. You will no longer be able to use it. This can accept both complete tokens (such as those you get back from- npm token create, and those found in your- .npmrc), and ids as seen in the parseable or json output of- npm token list. This will NOT accept the truncated token found in the normal- npm token listoutput.
Configuration
read-only
- Default: false
- Type: Boolean
This is used to mark a token as unable to publish when configuring limited
access tokens with the npm token create command.
cidr
- Default: null
- Type: null or String (can be set multiple times)
This is a list of CIDR address to be used when configuring limited access
tokens with the npm token create command.
registry
- Default: "https://registry.npmjs.org/"
- Type: URL
The base URL of the npm registry.
otp
- Default: null
- Type: null or String
This is a one-time password from a two-factor authenticator. It's needed
when publishing or changing package permissions with npm access.
If not set, and a registry response fails with a challenge for a one-time password, npm will prompt on the command line for one.