---
title: Authentication and Token
description: Authentication and Token interface paths, methods, parameters and return fields.
slug: developer-api-auth
lang: en
category: Authentication API
category_order: 8
order: 2
hide_in_nav: true
keywords:
  - API
  - Authentication and Token
  - Developer
---


# Authentication and Tokens

Obtain an authorization code, then exchange it using Basic authentication. Business APIs use a Bearer token; web login is a separate flow.

## Endpoints

| Method | Endpoint | Path |
| --- | --- | --- |
| `GET` | [Authentication interface one (login callback method)](api-get-api-authorize-do.md) | `/api/authorize.do` |
| `GET` | [Authentication interface two (login-free JWT token method)](api-get-api-authorizebyjwt-do.md) | `/api/authorizeByJWT.do` |
| `POST` | [refresh token](api-post-api-refreshtoken-do.md) | `/api/refreshToken.do` |
| `POST` | [Get token](api-post-api-token-do.md) | `/api/token.do` |

## Integration Notes

Based on the supplied Babel API reference. Preserve exact endpoint paths and field casing. Confirm unspecified or inconsistent field types during integration rather than assuming undocumented parameters. Use the deployment's HTTPS domain and keep credentials out of public pages.

[API overview](developer-api-overview.md) · [MCP quick start](mcp-integration.md)