--- title: "Authorization and Headers" slug: "authorization-and-headers" updated: 2024-09-22T21:37:01Z published: 2024-09-22T21:37:01Z canonical: "help.yahooinc.com/authorization-and-headers" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.yahooinc.com/llms.txt > Use this file to discover all available pages before exploring further. # Authorization and Headers This article describes authentication and authorization configurations required to access and use the DSP Traffic API. ## Overview The Yahoo DSP API uses the OAuth 2.0 protocol as a simple and secure method for handling authentication and controlling access. Refer to the [Setup & Access Guide](/dsp-api/docs/setup-access-guide) guide for setup instructions. ## Headers ```plaintext curl -X POST "https://dspapi.admanagerplus.yahoo.com/traffic/dictionary"  -H "Content-Type: application/json"  -H "X-Auth-Method: OAuth2"  -H "X-Auth-Token: Shp3CUKR5Q..." ``` All requests to the DSP Traffic API must contain the following headers: | **Header** | **Definition** | | --- | --- | | `Content-Type` | `application/json` | | `X-Auth-Method` | `OAuth2` | | `X-Auth-Token` | `<<OAUTH ACCESS TOKEN>>` |