# Authentication & Authorization

To interact with the Guusto API, you must authenticate your requests using an API token which can be generated within the Guusto Workspace Settings Page.

Protected Resource
Only an account with **Admin** access or the **Manage Settings** permission of a workspace can manage the corresponding Workspace API.

## Interacting with our APIs

A proper authentication requires the following components as part of each request (unless stated otherwise)

1. API token. [Create API Token Here](/version/pages/generate-api-token#generating-api-token)
2. [Workspace ID](#workspace-id) - Passed as part of the header, with header label: `X-Workspace-Id`
3. In some cases, some requires additional values for authentication. This will be indicate within the guide
4. Discover **Workspace Configurations and Restrictions** that could affect authorization of a request [here](/version/pages/rules-and-restrictions)


### Workspace ID

You can find your corresponding Workspace ID under your **Workspace Settings** > **API Page**

### Related Guides

API
Browse our [API cataloge](/version/openapi) here for a complete list of available endpoints.

Errors
Learn about the common response and error codes you might encounter. [Here](/version/pages/http-responses)

Request Limits
Some resources have request limits. See [Here](/version/pages/request-limits-and-throttling)