> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.bigcommerce.com/developer/api-reference/rest/b2b/management/authentication/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.bigcommerce.com/_mcp/server.

# Authentication

Authentication tokens validate API requests made by individuals or integrations to the server. All Server to Server API requests require an API token in the header of the request. When using the `X-Auth-Token` header with B2B Edition Server to Server API requests, the `X-Store-Hash` header is also required.

See [B2B Authentication](/developer/docs/b2b-edition/getting-started/authentication) for information on how to generate BigCommerce API tokens with appropriate scopes to use the B2B Edition Server to Server API.

Using authentication endpoints, you can:

* Arrange for your integration to log in a storefront user and gather tokens for future GraphQL requests in the context of a particular Company and user.
* Validate a storefront user's credentials in order to generate a GQL token.

The Authentication API allows you to create only storefront authTokens and deprecated V3 Server to Server authTokens, but you cannot create tokens for the deprecated V2 Server to Server API. You can create V2 tokens using the [API Account settings](https://support.bigcommerce.com/s/article/B2B-Edition-Settings) in the B2B Edition control panel; however, it is not recommended to use V2 endpoints.

> Build amazing commerce solutions powered by the BigCommerce platform


## API Docs

- Authentication [Get Storefront authToken with Credentials](https://docs.bigcommerce.com/developer/api-reference/rest/b2b/management/authentication/post-auth-customer.md)
- Authentication [Get B2B Storefront Token](https://docs.bigcommerce.com/developer/api-reference/rest/b2b/management/authentication/post-auth-customers-storefront.md)
- Authentication [Get Storefront API authToken](https://docs.bigcommerce.com/developer/api-reference/rest/b2b/management/authentication/get-auth-storefront.md)
- Authentication [Get Server to Server Token](https://docs.bigcommerce.com/developer/api-reference/rest/b2b/management/authentication/post-auth-backend.md)
- Authentication [Delete Backend API Tokens](https://docs.bigcommerce.com/developer/api-reference/rest/b2b/management/authentication/delete-auth-backend.md)
- Authentication [List Server to Server Tokens](https://docs.bigcommerce.com/developer/api-reference/rest/b2b/management/authentication/get-backend-tokens.md)

## OpenAPI Specification

The raw OpenAPI 3.1 specification for this API is available at:
- [OpenAPI JSON](https://docs.bigcommerce.com/developer/api-reference/rest/b2b/management/authentication/openapi.json)
- [OpenAPI YAML](https://docs.bigcommerce.com/developer/api-reference/rest/b2b/management/authentication/openapi.yaml)