R2 Dashboard

Create API token and S3 credentials

Create Cloudflare R2 API Token and S3 Secret

This guide explains how to obtain and configure the API Token and S3 credentials required by the R2 Dashboard Chrome extension.

Get API Token and S3 Keys

Go to https://dash.cloudflare.com/<ACCOUNT_ID>/r2/api-tokens/success and click “Create Account API Tokens”.
Use name R2 Dashboard, choose permission Admin Read & Write.
After creation, you’ll get API Token, S3 API access key id, and secret access key. Enter them in the extension’s Account settings and save.

Least privilege recommendation

Tip: Create two separate tokens/keys to minimize permissions:

R2 Dashboard - bucket list: list buckets only (no create/delete).
R2 Dashboard - S3 manage: manage objects within buckets (upload/download/rename/delete).

Configure both in the extension so it can read bucket lists and manage objects but cannot create or delete buckets.

For read-only analytics, you can also create a view-only token.