---
title: "Authorization"
slug: "authorization"
abstract: "Overview of authorizing Sitecore Personalize REST API requests."
---
# Authorization

Sitecore Personalize REST APIs use the OAuth 2.0 standard with JSON web tokens to authorize REST API requests.

To authorize a REST API request:

1. [Create an API key](https://doc.sitecore.com/personalize/en/developers/api/rest-apis/authorization/create-an-api-key.html "Create an API key").
2. [Request an access token](https://doc.sitecore.com/personalize/en/developers/api/rest-apis/authorization/request-an-access-token.html "Request an access token") using the API key.
3. Include the access token in the request header of every REST API request.