> For the complete documentation index, see [llms.txt](https://docs.api.intratool.de/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.api.intratool.de/introduction/authorization.md).

# Authorization

The intratool API uses OAuth 2.0 bearer tokens for authentication. API requests run with the permissions of the [User](/api-reference/users.md) associated with the supplied token.

A user can have multiple OAuth clients and personal access tokens. A token does not extend that user's module permissions, Entity Permissions, or other access rules.

## Authorization Flow

* [Get a Token](/introduction/authorization/get-token.md) describes how to create a personal access token.
* [Authorize](/introduction/authorization/authorize.md) describes the required request header.
* [Third-Party Login](/introduction/authorization/third-party-login.md) describes token-based browser login for third-party applications.