R2 - R2 Data Catalog now supports read-only API tokens
Cloudflare has announced that its R2 Data Catalog now supports read-only API tokens. The R2 Data Catalog is a feature of Cloudflare's R2 object storage service that helps users organize and discover their data. Previously, API tokens for the catalog had full read and write permissions. With this update, users can create tokens that are restricted to read-only access, meaning they can query the catalog but cannot make changes to it. This is particularly useful for sharing catalog access with team members or automated workflows that only need to view metadata, such as data analysts or monitoring systems. By limiting permissions, users can reduce the risk of accidental modifications or deletions of catalog entries. The change was announced on July 13, 2026, and is part of Cloudflare's ongoing updates to its developer platform. The feature is available immediately for all R2 users.
Read-only tokens enable safer sharing of catalog metadata without risking accidental writes.