---
metadata:
  - name: generator
    content: Diplodoc Platform v5.44.0
alternate:
  - https://yandex.com/dev/disk/doc/en/concepts/quickstart.md
  - https://yandex.com/dev/disk/doc/ru/concepts/quickstart.md
---
> **Documentation Index:** Fetch the complete configuration index at https://yandex.com/dev/disk/doc/en/llms.txt

# Getting started

The Yandex Disk API is available at the address [https://webdav.yandex.com](https://webdav.yandex.com). The connection must be made over the HTTPS protocol (port 443).

To access any user's data, the application must be authorized using Basic authentication or an OAuth access token.

## Basic authentication {#oauth_1}

Applications can get access to users' Disks with usernames and passwords, following the [Basic authentication mechanism](http://tools.ietf.org/html/rfc2617) of the HTTP protocol.

For Basic authentication, each of the application's requests to Yandex Disk must contain the `Authorization` header in the following format:

```yaml
Authorization: Basic <access token>
```

Here, the access token is a string in the format `<username>:<password>` in [Base64](http://en.wikipedia.org/wiki/Base64) encoding.

## Authorizing applications using OAuth tokens {#oauth}

Applications can get access to users' Disks by using OAuth tokens. Each access token allows a specific application to access the data of a specific user.

To access Yandex services using the OAuth protocol, the developer must register the application on the [oauth.yandex.com/](https://oauth.yandex.com/) service, in the [Register new application](https://oauth.yandex.com/client/new) section.

When registering an application that uses the Yandex Disk API, you should select the appropriate access rights:

![oauth-scope](../_images/oauth-scope.png)

After registration, the application can [use any appropriate method](https://yandex.com/dev/oauth/doc/dg/concepts/about.html) to get OAuth tokens for accessing user data.

The access token that is obtained must be passed in the `Authorization` header for every call to the Yandex Disk API, indicating the token type before the token value. Example for this header:

```yaml
Authorization: OAuth 0c4181a7c2cf4521964a72ff57a34a07
```

For information on obtaining and using OAuth access tokens, see the [documentation for the Yandex OAuth service](https://yandex.com/dev/oauth/doc/dg/yandex-oauth-dg.html).