# CLI support for ephemeral service tokens

**URL:** <https://community.doppler.com/t/cli-support-for-ephemeral-service-tokens/440>\
**Category:** Feature Requests\
**Created:** [December 1, 2021, 1:42am UTC](https://community.doppler.com/t/cli-support-for-ephemeral-service-tokens/440 "2021-12-01T01:42:41Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dallas\_Slaughter](https://sea2.discourse-cdn.com/flex016/user_avatar/community.doppler.com/dallas_slaughter/32/290_2.png) [@Dallas\_Slaughter](https://community.doppler.com/u/Dallas_Slaughter)\
**Post date:** [December 1, 2021, 1:42am UTC](https://community.doppler.com/t/cli-support-for-ephemeral-service-tokens/440/1 "2021-12-01T01:42:41Z")

</div>

Would love to see support for ephemeral/temporary service tokens with the CLI.

Use case: running a script that needs a DOPPLER\_TOKEN and the user doesn’t have that or it is named incorrectly (but is presumably logged in to doppler) - instead of failing, the script could create a temporary token to use for the duration of the execution.

This has the added benefit of being able to enforce token scoping for such scripts/usages by not even checking for DOPPLER\_TOKEN .

---

<div class="post-metadata">

**Author:** ![ryan-blunden](https://sea2.discourse-cdn.com/flex016/user_avatar/community.doppler.com/ryan-blunden/32/9_2.png) [@ryan-blunden](https://community.doppler.com/u/ryan-blunden)\
**Post date:** [December 1, 2021, 3:50am UTC](https://community.doppler.com/t/cli-support-for-ephemeral-service-tokens/440/2 "2021-12-01T03:50:34Z")

</div>

Hey Dallas!

We recently added support for ephemeral Service Tokens.

They can be created via the dashboard:

 ![image](https://us1.discourse-cdn.com/flex016/uploads/doppler/original/1X/110643dcd6f7b558246bee19f216aeaa8823d488.jpeg)

Or the CLI as of version v3.33.0.

Here’s an example feeding an ephemeral Service Token to a Docker container using the CLI:

```auto
docker run --rm -it \
  -e DOPPLER_TOKEN=$(doppler configs tokens create docker-temp --max-age 1m --plain) 
  your-docker-image

```

https://player.vimeo.com/video/651849552?h=cdd01c97eb&app_id=122963

---

<div class="post-metadata">

**Author:** ![Dallas\_Slaughter](https://sea2.discourse-cdn.com/flex016/user_avatar/community.doppler.com/dallas_slaughter/32/290_2.png) [@Dallas\_Slaughter](https://community.doppler.com/u/Dallas_Slaughter)\
**Post date:** [December 2, 2021, 7:06pm UTC](https://community.doppler.com/t/cli-support-for-ephemeral-service-tokens/440/3 "2021-12-02T19:06:46Z")

</div>

Ah that’s exactly what I was looking for!

Turns out I installed Doppler via homebrew and that was preventing `doppler update` from actually updating anything, needed to `brew upgrade doppler`. Might be worth having `doppler update` run that if installed via brew?