---
metadata:
  - name: generator
    content: Diplodoc Platform v5.44.0
alternate:
  - https://yandex.com/dev/webmaster/doc/en/tasks/how-to-get-oauth.md
  - https://yandex.com/dev/webmaster/doc/ru/tasks/how-to-get-oauth.md
keywords:
  - a
  - u
  - t
  - h
  - o
  - r
  - i
  - z
  - 'n'
---
> **Documentation Index:** Fetch the complete configuration index at https://yandex.com/dev/webmaster/doc/en/llms.txt


# Authorization

In order to perform actions on Yandex.Webmaster on behalf of a particular user, a client application must be registered in the [Yandex.OAuth](https://oauth.yandex.com) service.

Authorization uses the [OAuth 2.0](http://tools.ietf.org/html/draft-ietf-oauth-v2) protocol. The interaction between the application and the OAuth server is shown on the [OAuth implementation in Yandex](https://tech.yandex.com/oauth/doc/dg/concepts/ya-oauth-intro.xml) page.

The user information is accepted as an access token in the `Authorization` HTTP header. The authorization procedure is described in the [Extract a token from the URL](https://tech.yandex.com/oauth/doc/dg/reference/web-client-docpage/) section of the Yandex.OAuth documentation.

If the user data is requested without an access token, the HTTP status 401 `Unauthorized` is returned.

### Related information

- [OAuth authorization in Yandex](https://tech.yandex.com/oauth)