# Token Authorization

API endpoints that are tagged with `Token` authorization allow to access API by token issued for specific API client.

The requests authorized with the token should have it passed under `X-Client-Authorization` header:

```
X-Client-Authorization: uzeYpb5YredkgmtHo3UCK8YtBfSg
```

API tokens are prepared for specific integrations by our Support team - if you miss your authentication token, please <a href="mailto:support@placewise.com">let us know</a>.

Each token has specific set of [permits](doc-342143) assigned. Depending what permits are assigned, access to some of the endpoints may be restricted, if you miss permits you need, please <a href="mailto:support@placewise.com">let us know</a>.

:::warning
Please note that all endpoints except for those within [Public API](doc-341643) operate on confidential customer data. Tokens with access to such endpoints **should not be exposed publicly (e.g. in frontend code)**.
:::