Cisco Crosswork · Authentication Profile

Cisco Crosswork Authentication

Authentication

Cisco Crosswork secures its APIs with apiKey and http across 3 declared security schemes, as derived from its OpenAPI definitions.

Network AutomationService ProviderOrchestrationNetworkingAssuranceTelecomRESTCONFYANGZero Touch ProvisioningWorkflow-AutomationTraffic EngineeringMCPTelemetryOn-Premises
Methods: apiKey, http Schemes: 3 OAuth flows: API key in: header

Security Schemes

bearerAuth apiKey
· in: header (Authorization)
basicAuth http
scheme: basic
Bearer apiKey
· in: header (Authorization)

Source

Authentication Profile

Raw ↑ 
generated: '2026-08-19'
method: searched
source: https://developer.cisco.com/docs/crosswork/network-controller/intent-based-service-provisioning-getting-started/
docs:
- https://developer.cisco.com/docs/crosswork/network-controller/intent-based-service-provisioning-getting-started/
- https://developer.cisco.com/docs/crosswork/network-controller/fault-management-getting-started/
- https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/crosswork-infrastructure/7-1/AdminGuide/b_CiscoCrossworkAdminGuide_7_1/m_security.html
summary:
  types:
  - apiKey
  - http
  api_key_in:
  - header
primary_scheme: JWT bearer token minted by the Crosswork instance itself
note: 'Every Crosswork northbound API is protected by a JWT bearer token that the CUSTOMER''S OWN Crosswork deployment
  issues — there is no Cisco-hosted authorization server and no API key to obtain from a developer portal. The refined
  OpenAPI files carry this as `bearerAuth` (NCAHI/CDG/ZTP), `Bearer` (Crosswork Workflow Manager) and, on two of
  the older CNC/COE service-model specs, `basicAuth` — a spec-level inconsistency worth noting: the same product
  family declares three different scheme names for what the documentation describes as one JWT flow.'
token_flow:
  style: two-step ticket exchange (CAS-style), not OAuth 2.0
  steps:
  - step: 1
    name: Obtain a Ticket Granting Ticket (TGT)
    method: POST
    url: https://{cnc-host}:{cnc-port}/crosswork/sso/v1/tickets
    content_type: application/x-www-form-urlencoded
    body: username and password of a Crosswork account
  - step: 2
    name: Exchange the TGT for a JWT
    method: POST
    url: https://{cnc-host}:{cnc-port}/crosswork/sso/v2/tickets/jwt
    body: the TGT plus the forwarding service URL
  use: 'Authorization: Bearer {jwt}'
  source: https://developer.cisco.com/docs/crosswork/network-controller/intent-based-service-provisioning-getting-started/
authorization:
  model: RBAC
  note: API-level access is controlled by RBAC policies configured inside the Crosswork instance. There are no OAuth
    scopes — this repo therefore carries no scopes/ artifact, which is a correct absence rather than a gap.
  admin_guide: https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/crosswork-infrastructure/7-1/AdminGuide/b_CiscoCrossworkAdminGuide_7_1/m_security.html
oauth2: false
mtls: false
schemes:
- name: bearerAuth
  type: apiKey
  in: header
  parameter: Authorization
  sources:
  - openapi/cisco-crosswork-add-credentials-api-openapi.yml
  - openapi/cisco-crosswork-add-data-gateway-enrollments-api-openapi.yml
  - openapi/cisco-crosswork-add-destinations-api-openapi.yml
  - openapi/cisco-crosswork-add-nodes-devices-api-openapi.yml
  - openapi/cisco-crosswork-add-policies-api-openapi.yml
  - openapi/cisco-crosswork-add-providers-api-openapi.yml
  - openapi/cisco-crosswork-add-tags-api-openapi.yml
  - openapi/cisco-crosswork-add-via-csv-file-api-openapi.yml
  - openapi/cisco-crosswork-alert-api-api-openapi.yml
  - openapi/cisco-crosswork-authconfig-api-openapi.yml
  - openapi/cisco-crosswork-command-api-openapi.yml
  - openapi/cisco-crosswork-crosswork-health-api-api-openapi.yml
  - openapi/cisco-crosswork-custom-files-api-openapi.yml
  - openapi/cisco-crosswork-cwm-adapters-api-openapi.yml
  - openapi/cisco-crosswork-cwm-defaults-api-openapi.yml
  - openapi/cisco-crosswork-cwm-event-api-openapi.yml
  - openapi/cisco-crosswork-cwm-event-type-api-openapi.yml
  - openapi/cisco-crosswork-cwm-forms-api-openapi.yml
  - openapi/cisco-crosswork-cwm-jobs-api-openapi.yml
  - openapi/cisco-crosswork-cwm-mcp-api-openapi.yml
  - openapi/cisco-crosswork-cwm-payload-api-openapi.yml
  - openapi/cisco-crosswork-cwm-public-key-api-openapi.yml
  - openapi/cisco-crosswork-cwm-resources-api-openapi.yml
  - openapi/cisco-crosswork-cwm-scheduler-api-openapi.yml
  - openapi/cisco-crosswork-cwm-secrets-api-openapi.yml
  - openapi/cisco-crosswork-cwm-tasks-api-openapi.yml
  - openapi/cisco-crosswork-cwm-worker-profiles-api-openapi.yml
  - openapi/cisco-crosswork-cwm-workers-api-openapi.yml
  - openapi/cisco-crosswork-cwm-workflow-api-openapi.yml
  - openapi/cisco-crosswork-delete-credentials-api-openapi.yml
  - openapi/cisco-crosswork-delete-data-gateway-enrollments-api-openapi.yml
  - openapi/cisco-crosswork-delete-destinations-api-openapi.yml
  - openapi/cisco-crosswork-delete-nodes-devices-api-openapi.yml
  - openapi/cisco-crosswork-delete-policies-api-openapi.yml
  - openapi/cisco-crosswork-delete-providers-api-openapi.yml
  - openapi/cisco-crosswork-delete-tags-api-openapi.yml
  - openapi/cisco-crosswork-delete-via-csv-file-api-openapi.yml
  - openapi/cisco-crosswork-file-controller-api-openapi.yml
  - openapi/cisco-crosswork-get-credentials-api-openapi.yml
  - openapi/cisco-crosswork-get-data-gateway-enrollments-api-openapi.yml
  - openapi/cisco-crosswork-get-destinations-api-openapi.yml
  - openapi/cisco-crosswork-get-inventory-jobs-api-openapi.yml
  - openapi/cisco-crosswork-get-nodes-count-api-openapi.yml
  - openapi/cisco-crosswork-get-nodes-devices-api-openapi.yml
  - openapi/cisco-crosswork-get-nodes-summary-api-openapi.yml
  - openapi/cisco-crosswork-get-policies-api-openapi.yml
  - openapi/cisco-crosswork-get-providers-api-openapi.yml
  - openapi/cisco-crosswork-get-tags-api-openapi.yml
  - openapi/cisco-crosswork-health-controller-api-openapi.yml
  - openapi/cisco-crosswork-image-controller-api-openapi.yml
  - openapi/cisco-crosswork-image-platform-controller-api-openapi.yml
  - openapi/cisco-crosswork-map-or-unmap-devices-to-a-data-gateway-api-openapi.yml
  - openapi/cisco-crosswork-misc-api-openapi.yml
  - openapi/cisco-crosswork-password-api-openapi.yml
  - openapi/cisco-crosswork-put-replace-destinations-api-openapi.yml
  - openapi/cisco-crosswork-put-replace-providers-api-openapi.yml
  - openapi/cisco-crosswork-rbac-api-openapi.yml
  - openapi/cisco-crosswork-remove-tags-from-nodes-devices-api-openapi.yml
  - openapi/cisco-crosswork-replaces-credentials-api-openapi.yml
  - openapi/cisco-crosswork-replaces-nodes-devices-api-openapi.yml
  - openapi/cisco-crosswork-troubleshooting-api-api-openapi.yml
  - openapi/cisco-crosswork-update-credentials-api-openapi.yml
  - openapi/cisco-crosswork-update-data-gateway-enrollments-api-openapi.yml
  - openapi/cisco-crosswork-update-destinations-api-openapi.yml
  - openapi/cisco-crosswork-update-nodes-devices-api-openapi.yml
  - openapi/cisco-crosswork-update-policies-api-openapi.yml
  - openapi/cisco-crosswork-update-providers-api-openapi.yml
  - openapi/cisco-crosswork-update-via-csv-file-api-openapi.yml
  - openapi/cisco-crosswork-version-api-api-openapi.yml
- name: basicAuth
  type: http
  scheme: basic
  sources:
  - openapi/cisco-crosswork-data-api-openapi.yml
  - openapi/cisco-crosswork-flat-l2vpn-provision-api-openapi.yml
  - openapi/cisco-crosswork-flat-l2vpn-retrieval-api-openapi.yml
  - openapi/cisco-crosswork-flat-l3vpn-provision-api-openapi.yml
  - openapi/cisco-crosswork-flat-l3vpn-retrieval-api-openapi.yml
  - openapi/cisco-crosswork-get-api-openapi.yml
  - openapi/cisco-crosswork-ietf-l2vpn-nm-provision-api-openapi.yml
  - openapi/cisco-crosswork-ietf-l2vpn-nm-retrieval-api-openapi.yml
  - openapi/cisco-crosswork-ietf-te-provision-api-openapi.yml
  - openapi/cisco-crosswork-ietf-te-retrieval-api-openapi.yml
  - openapi/cisco-crosswork-l2vpn-route-policy-provision-api-openapi.yml
  - openapi/cisco-crosswork-l2vpn-route-policy-retrieval-api-openapi.yml
  - openapi/cisco-crosswork-l3vpn-route-policy-provision-api-openapi.yml
  - openapi/cisco-crosswork-l3vpn-route-policy-retrieval-api-openapi.yml
  - openapi/cisco-crosswork-operations-api-openapi.yml
  - openapi/cisco-crosswork-post-api-openapi.yml
  - openapi/cisco-crosswork-root-api-openapi.yml
  - openapi/cisco-crosswork-yang-library-version-api-openapi.yml
- name: Bearer
  type: apiKey
  in: header
  parameter: Authorization
  description: 'JWT Authorization header using the Bearer scheme. Example: "Authorization: Bearer {token}"'
  sources:
  - openapi/cisco-crosswork-cwm-workflow-api-openapi.yml
checked: '2026-08-19'