# Authentication

{% hint style="info" %}
The REST API is available as BETA.
{% endhint %}

The REST API allows you to interact with Ativo Programs interactively. Use this API to extract configuration data that has been saved in Ativo itself.&#x20;

Jira issue data (including [custom fields](https://docs.ativo.io/advanced/ativo-programs-custom-fields) ) is never processed in the Ativo backend, and hence not available via the API. Use the Jira API instead to access Jira issue data.

### Create an API token

Jira admins can create an API authentication token. Go to ***Jira settings > Manage apps > Ativo Programs > REST API*** and click on "Create" button.

<figure><img src="https://2916206105-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FBAGNud2YIYXdGXre7dQK%2Fuploads%2FR4Vv6B2JtueqDDvCninj%2Fimage.png?alt=media&#x26;token=bb44a25b-8957-4447-8de0-ad7370d21bec" alt=""><figcaption></figcaption></figure>

Choose a name for the token, and click submit.&#x20;

The generated token will be shown. Make sure to copy the token, as you will not be able to see it again afterwards.&#x20;

<figure><img src="https://2916206105-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FBAGNud2YIYXdGXre7dQK%2Fuploads%2FiCrdhjsFc8nfPVJCDRuG%2Fimage.png?alt=media&#x26;token=c6f56f97-c440-4216-a553-45e74e8a225b" alt=""><figcaption></figcaption></figure>

### Revoke a token

Jira admins can revoke tokens. They can do so for all tokens, including tokens from other Jira admins.&#x20;

Click on the revoke button next to the token. The token is revoked immediately.

<figure><img src="https://2916206105-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FBAGNud2YIYXdGXre7dQK%2Fuploads%2FLuziKtpTzNS7YzbMZEK8%2Fimage.png?alt=media&#x26;token=92cdddcb-7b88-4625-898d-f2cc5d522802" alt=""><figcaption></figcaption></figure>

### Authentication and authorization

Most REST API clients provide a mechanism to supply an authorization token.&#x20;

For example, you can supply the `-H`  option to `curl`. The example (for Jira cloud) below will provide the index list of Ativo teams.

```sh
curl https://cloud-api.ativo.io/rest/api/1/team
 -H "Authorization: Bearer <token>"  
```

### Versioning

The Jira API endpoints and returned models are [versioned](https://docs.ativo.io/rest-api/version).

### Learn more

Browser the REST API:

{% content-ref url="cloud-rest-api" %}
[cloud-rest-api](https://docs.ativo.io/rest-api/cloud-rest-api)
{% endcontent-ref %}

{% content-ref url="data-center-rest-api" %}
[data-center-rest-api](https://docs.ativo.io/rest-api/data-center-rest-api)
{% endcontent-ref %}
