# REST API Authentication
yCrash REST APIs—such as GC log analysis, heap dump analysis, thread dump analysis, and bundle upload—require authentication. Choose the authentication method that best fits your deployment and integration needs.
# Supported authentication methods
# API key
Use the API key from your license in the request URL. This is the default method and works well for automation, scripts, and integrations that need simple, stateless authentication.
Learn how to use API key authentication →
# LDAP JWT
Authenticate against your corporate LDAP or Active Directory. Exchange username and password for a short-lived JWT token, then use that token in the Authorization header for API requests. Ideal for automation, CI/CD pipelines, monitoring platforms, and enterprise environments that centralize identity in LDAP or AD.
Learn how to configure LDAP JWT authentication →
# Basic Auth
Add HTTP Basic Authentication to your API requests by sending a username and password with each request. This provides an extra layer of security on top of your API key. Best for shared or multi-tenant environments where you need user-level access control.