---
schema: rendered-html/v1
title: "Permanent Token Authorization | Developer Portal for YouTrack and Hub Documentation"
source_url: https://www.jetbrains.com/help/youtrack/devportal/authentication-with-permanent-token.html
generated_at: 2026-06-11T15:02:09.361556+00:00
---

Feedback

Thanks for your feedback!

Was this page helpful?

YesNo

Developer Portal for YouTrack and Hub

- Developer Portal
- Apps
- MCP Tools
- YouTrack Workflows
- YouTrack Import Scripts
- YouTrack Form API
- YouTrack REST API
- Get Started with REST API
- Log in to YouTrack
- [Permanent Token Authorization](authentication-with-permanent-token.html)
- Manage Permanent Tokens
- OAuth 2.0 Authorization
- REST API URL and Endpoints
- OpenAPI Specification (OAS)
- Fields Syntax
- Query Syntax
- Request Headers
- Custom Fields in REST API
- Pagination
- Users, Groups, and Access Management
- Hub REST API Endpoints Deprecated in YouTrack 2026.1
- Postman Collection for the YouTrack REST API
- REST API Reference
- REST API Use Cases
- REST API Troubleshooting
- Color Indices List
- Hub REST API

1. YouTrack REST API
2. Get Started with REST API
3. Log in to YouTrack
4. [Permanent Token Authorization](#0)

# Permanent Token Authorization﻿

Last modified: 07 May 2026

Permanent tokens give you secure access to YouTrack from your client applications and scripts. Compared to OAuth 2.0, authorization with a permanent token has the following advantages:

- **Secure token-based authorization** — authorize access without implementing a complex OAuth 2.0 authorization flow to obtain access tokens.
- **Simple management** — create your own permanent tokens in your user profile. If you suspect that your connection has been compromised, you can delete the token at any time and generate a new one.
- **Granular access** — leverage the permission scheme to restrict the scope for different users. Permanent tokens only authorize actions that are allowed for the user who the token belongs to. You can create dedicated accounts for API users and grant a specific set of permissions to each.

To learn how to create or delete a permanent token in your user profile, see Manage Permanent Tokens.

## Sample Request﻿

The following sample shows a REST API call which utilizes a permanent token as the `Bearer` attribute of the `Authorization` header.

**Request:**

YouTrack Server

YouTrack Cloud

```
curl -X GET \
'https://youtrack.example.com/api/admin/projects?fields=id,name,shortName,createdBy%28login,name,id%29,leader%28login,name,id%29' \
-H 'Authorization: Bearer perm:cm9vdA==.dG9rZW4=.rNZ38ije7uiWwnUTRDdyFDdUkoPUPi' \
-H 'Accept: application/json' \
-H 'Content-Type: application/json'
```

```
curl -X GET \
'https://example.youtrack.cloud/api/admin/projects?fields=id,name,shortName,createdBy%28login,name,id%29,leader%28login,name,id%29' \
-H 'Authorization: Bearer perm:am9obi5kb2U=.UG9zdG1hbiBKb2huIERvZQ==.jJe0eYhhkV271j1lCpfknNYOEakNk7' \
-H 'Accept: application/json' \
-H 'Cache-Control: no-cache' \
-H 'Content-Type: application/json'
```

**Response:**

```
HTTP 200 OK
Cache-Control → no-cache, no-store, no-transform, must-revalidate
Content-Encoding → gzip
Content-Length → 208
Content-Type → application/json;charset=utf-8
Date →Tue, 07 Aug 2018 11:01:17 GMT
Server → YouTrack
Vary →Accept-Encoding, User-Agent
X-Content-Type-Options →nosniff
X-Frame-Options →SAMEORIGIN
X-XSS-Protection →1; mode=block
[
    {
        "shortName": "RAP",
        "leader": {
            "login": "john.doe",
            "name": "John Doe",
            "id": "1-2"
        },
        "createdBy": {
            "login": "john.doe",
            "name": "John Doe",
            "id": "1-2"
        },
        "name": "Rest Api Project",
        "id": "0-2"
    },
    {
        "shortName": "SP",
        "leader": {
            "login": "root",
            "name": "John Smith",
            "id": "1-1"
        },
        "createdBy": {
            "login": "root",
            "name": "John Smith",
            "id": "1-1"
        },
        "name": "Sample Project",
        "id": "0-0"
    }
]
```

- [Permanent Token Authorization](/help/youtrack/devportal/authentication-with-permanent-token.html)
- [Sample Request](/help/youtrack/devportal/authentication-with-permanent-token.html#permanent-token-sample)

Log in to YouTrackManage Permanent Tokens

- Privacy & Security
- Terms Of Use
- Trademarks
- Legal

Copyright © 2000–2026 JetBrains s.r.o.
