InfluxDB

Overview

Use InfluxDB credentials to make authenticated API calls through Alter Vault without exposing API keys in code.

Property	Value
Provider ID	influxdb
Category	Database
Credential Type	API Token

Step 1: Get Credentials

Log in to InfluxDB Cloud

Log in to InfluxDB Cloud.

Open API Tokens

Go to Load Data > API Tokens.

Generate a token

Generate an All Access or custom (bucket-scoped) token and copy it — it is only shown once.

Warning

Never share credentials publicly. Store them securely and only enter them in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add InfluxDB

Go to Managed Secrets > Add Provider > InfluxDB.

Enter credentials

Paste your API Token into the credential field.

Save

Click Save. You’ll receive a grant_id to use with the SDK.

Using in Code

response = await alter_app.request(
    HttpMethod.POST,
    "https://YOUR-REGION.cloud2.influxdata.com/api/v2/query",
    grant_id="YOUR_GRANT_ID",
    query_params={"org": "YOUR-ORG"},
    json={
        "query": 'from(bucket: "metrics") |> range(start: -1h) |> limit(n: 5)',
        "type": "flux",
    },
)

Notes

• The token is injected as Authorization: Token <token>; InfluxDB 3 endpoints also accept Bearer.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
PostQuery	read, write	POST	/query
PostWrite	write	POST	/write
PostDelete	delete	POST	/delete
GetBuckets	read	GET	/buckets
GetBucketsID	read	GET	/buckets/{bucketID}
PostBuckets	write	POST	/buckets
PatchBucketsID	write	PATCH	/buckets/{bucketID}
DeleteBucketsID	delete	DELETE	/buckets/{bucketID}
GetTasks	read	GET	/tasks
GetTasksID	read	GET	/tasks/{taskID}
PostTasks	write	POST	/tasks
PatchTasksID	write	PATCH	/tasks/{taskID}
DeleteTasksID	delete	DELETE	/tasks/{taskID}
GetDashboards	read	GET	/dashboards
PostDashboards	write	POST	/dashboards
PatchDashboardsID	write	PATCH	/dashboards/{dashboardID}
DeleteDashboardsID	delete	DELETE	/dashboards/{dashboardID}
GetOrgs	read	GET	/orgs
PostOrgs	admin	POST	/orgs
PatchOrgsID	admin	PATCH	/orgs/{orgID}
DeleteOrgsID	admin, delete	DELETE	/orgs/{orgID}
GetUsers	read	GET	/users
PostUsers	admin	POST	/users
PatchUsersID	admin	PATCH	/users/{userID}
DeleteUsersID	admin, delete	DELETE	/users/{userID}
GetAuthorizations	read	GET	/authorizations
PostAuthorizations	admin	POST	/authorizations
PatchAuthorizationsID	admin	PATCH	/authorizations/{authID}
DeleteAuthorizationsID	admin, delete	DELETE	/authorizations/{authID}
GetMe	read	GET	/me
GetPing	read	GET	/ping