GH-AUTH-TOKEN(1) GitHub CLI manual GH-AUTH-TOKEN(1)

# [NAME](#NAME)

gh-auth-token - Print the authentication token gh uses for a hostname and account

# [SYNOPSIS](#SYNOPSIS)

**gh auth token \[flags]**

# [DESCRIPTION](#DESCRIPTION)

This command outputs the authentication token for an account on a given GitHub host.

Without the **--hostname** flag, the default host is chosen.

Without the **--user** flag, the active account for the host is chosen.

If the token is an expired or near-expiry token that supports refreshing, it is refreshed automatically before being printed, unless **--no-refresh** is given.

# [OPTIONS](#OPTIONS)

[**-h**, **--hostname** **<string>**](#h)

The hostname of the GitHub instance authenticated with

[**--no-refresh**](#no_refresh)

Do not automatically refresh an expired token

[**-u**, **--user** **<string>**](#u)

The account to output the token for

# [EXIT CODES](#EXIT_CODES)

0: Successful execution

1: Error

2: Command canceled

4: Authentication required

NOTE: Specific commands may have additional exit codes. Refer to the command's help for more information.

# [SEE ALSO](#SEE_ALSO)

[**gh-auth(1)**](/man/os/gh/gh-auth.1)

Oct 2026

---

Document: gh-auth-token(1) from gh 2.103.3-r0 (Chainguard OS)
Source: https://github.com/cli/cli