Raw New Markdown
Generating updated version of doc...
Rendered New Markdown
Generating updated version of doc...
---
title: SAS token Generation in Microsoft Planetary Computer Pro
description: See how to retrieve a sas token to access collection-level assets.
author: beharris
ms.author: brentharris
ms.service: planetary-computer-pro
ms.topic: quickstart
ms.date: 05/27/2026
#customer intent: help customers get a sas token for a collection.
---
# Quickstart: Request a STAC collection SAS token
In this quickstart, you will retrieve a collection-level SAS token that can be used by other applications to access STAC collection assets in a managed storage account within a Microsoft Planetary Computer Pro GeoCatalog resource.
In some applications, you need to pass a **collection-level SAS token** to enable authenticated access to assets stored in a managed storage account.
For example, when retrieving **collection-level assets** such as Zarr data, a SAS token provides temporary permissions to access the data directly from blob storage.
This example shows how to request a collection-level SAS token from the `/sas/token/{collection_id}` route.
# [REST API](#tab/restapi)
## 1. Get Access Token for Authorization to a GeoCatalog
```python
from datetime import datetime, timedelta
import requests
from azure.identity import AzureCliCredential
# Resource ID for Planetary Computer Pro Geocatalog
MPCPRO_APP_ID = "https://geocatalog.spatio.azure.com"
_access_token = None
def getBearerToken():
global _access_token
if not _access_token or datetime.fromtimestamp(_access_token.expires_on) < datetime.now() + timedelta(minutes=5):
credential = AzureCliCredential()
_access_token = credential.get_token(f"{MPCPRO_APP_ID}/.default")
return {"Authorization": f"Bearer {_access_token.token}"}
```
## 2. Request a SAS Token for a STAC Collection
Access the endpoint that returns your temporary STAC collection-level SAS token.
```python
geocatalog_url = "<your-geocatalog-url>"
collection_id = "<your-collection-id>"
response = requests.get(
f"{geocatalog_url}/sas/token/{collection_id}",
headers=getBearerToken(),
params={"api-version": "2026-04-15"}
)
sas_token = response.json()["token"]
print(f"SAS Token: {sas_token}")
```
The `sas_token` variable contains the token string you can pass into applications that need to retrieve collection-level assets.
# [Python SDK](#tab/pythonsdk)
## Prerequisites
- [Python 3.10 or later](https://www.python.org/downloads/)
Install the Planetary Computer Pro Python SDK:
```console
pip install azure-planetarycomputer azure-identity
```
## Request a SAS Token for a STAC Collection
```python
from azure.planetarycomputer import PlanetaryComputerProClient
from azure.identity import DefaultAzureCredential
client = PlanetaryComputerProClient(
endpoint="<your-geocatalog-url>",
credential=DefaultAzureCredential()
)
collection_id = "<your-collection-id>"
sas_response = client.sas.get_token(collection_id)
sas_token = sas_response["token"]
print(f"SAS Token: {sas_token}")
```
The `sas_token` variable contains the token string you can pass into applications that need to retrieve collection-level assets.
For more information, see the [Python SDK reference](/python/api/overview/azure/planetarycomputer-readme).
---
View on GitHub