Crunchtime Information Systems Authentication

generated: '2026-07-18'
method: searched
source: https://developer.crunchtime.com/docs/getting-started-with-apis
docs: https://developer.crunchtime.com/docs/getting-started-with-apis
description: >-
  Crunchtime Inventory & Labor / Cruise APIs use custom header-based token
  authentication. Every request carries four headers: an access token plus the
  site name and an Application User's id and password. Tokens are minted per
  Application User in Enterprise Manager (Security > Application Users > API
  Tokens) and separate test and production tokens are issued. There is no OAuth2
  or OpenID Connect surface, so this repo has no scopes/ artifact.
summary:
  types: [apiKey]
  api_key_in: [header]
  oauth2_flows: []
schemes:
- name: authenticationtoken
  type: apiKey
  in: header
  parameter_name: authenticationtoken
  description: >-
    Secure access token for API authentication. Issued per Application User in
    Enterprise Manager; distinct test and production tokens exist.
  sources: [https://developer.crunchtime.com/reference/getalllocationsv1usingget]
- name: sitename
  type: apiKey
  in: header
  parameter_name: sitename
  description: >-
    Crunchtime site identifier (the portion of the customer URL before
    .net-chef.com), designating the test or production environment.
  sources: [https://developer.crunchtime.com/reference/getalllocationsv1usingget]
- name: userid
  type: apiKey
  in: header
  parameter_name: userid
  description: Application User ID used for the request.
  sources: [https://developer.crunchtime.com/reference/getalllocationsv1usingget]
- name: password
  type: apiKey
  in: header
  parameter_name: password
  description: Application User password paired with the userid header.
  sources: [https://developer.crunchtime.com/reference/getalllocationsv1usingget]
credential_management:
  console: Enterprise Manager > Security > Application Users > API Tokens
  self_service: >-
    A self-service API token management process (added 2026-04-28) lets users
    create and manage tokens directly in Enterprise Manager without Support tickets.
  guidance: >-
    Crunchtime recommends creating a dedicated Application User (e.g. "API User")
    rather than authenticating as a named human user.
  contact: apiquestions@crunchtime.com