> This page is for Docs.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://zuora.ferndocs.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://zuora.ferndocs.com/_mcp/server.

# Authentication

> Learn how to authenticate to the Zuora REST API using OAuth v2.0, including creating an OAuth client, generating a bearer token, and authenticating API requests.

Learn how to authenticate to the Zuora REST API using OAuth v2.0, including creating an OAuth client, generating a bearer token, and authenticating API requests.

Zuora recommends that you use OAuth v2.0 to authenticate to the REST API. Authenticating via OAuth requires the following steps:

Create an OAuth client in the Zuora UI

[Generate a bearer token](https://developer.zuora.com/v1-api-reference/api/operation/createToken/)

Authenticate subsequent API requests by providing a valid bearer token in an HTTP header: `Authorization: Bearer {token}`

If you have Zuora Multi-entity enabled and your bearer token is valid for more than one entity, use the `Zuora-Entity-Ids` header to specify which entity to perform each API request in. If your bearer token is only valid for a single entity, or you do not have Zuora Multi-entity enabled, you do not need to set the `Zuora-Entity-Ids` header in your API calls.

See [Authentication](https://developer.zuora.com/docs/guides/authentication/) for more information about how to authenticate to the REST API.