Crunchtime Authentication
Crunchtime Inventory & Labor APIs authenticate with a per-environment API authentication token issued from Enterprise Manager, sent together with the customer site name, application user id and password. Tokens are scoped per environment (separate Test and Production tokens); a single token can access multiple API services within its environment, and grants access to data for all locations associated with that application user's Crunchtime site. There is no OAuth 2.0 / OpenID Connect flow and no scope surface — this is a token + named-application-user model, so no scopes/ artifact is emitted.
Crunchtime secures its APIs with apiKey across 4 declared security schemes, as derived from its OpenAPI definitions.
Security Schemes
Source
Authentication Profile
Work with this as data
Every security artifact here is available over the APIs.io API and to AI agents over MCP.