---
title: Authentication
description: "PulseRank API uses WordPress's standard authentication methods. Most endpoints require `manage_options` capability (Administrator role). **Base URL** ``` https://yoursite.com/wp-json/pulserank/v1/ ``` ##### Application Passwords **Best for:** External applications, scripts, API clients **Generate Password:** 1. WordPress Admin → Users → Your Profile 2. Scroll to \"Application…"
url: "https://pulserank.ai/docs/authentication/"
updated: "2026-01-09"
category: API Documentation
---

# Authentication

PulseRank API uses WordPress's standard authentication methods. Most endpoints require `manage_options` capability (Administrator role).

**Base URL**

```
https://yoursite.com/wp-json/pulserank/v1/
```

##### Application Passwords

**Best for:** External applications, scripts, API clients

**Generate Password:**

1. WordPress Admin → Users → Your Profile
2. Scroll to "Application Passwords"
3. Enter application name → Click "Add New"
4. Copy the generated passwor

```
curl -u username:application_password 
  https://yoursite.com/wp-json/pulserank/v1/reports/overview?days=7
```

```
const credentials = btoa('username:application_password');
fetch('https://yoursite.com/wp-json/pulserank/v1/reports/overview?days=7', {
    headers: {
        'Authorization': 'Basic ' + credentials
    }
});
```

##### Cookie Authentication

**Best for:** Admin dashboard AJAX requests. Automatically works when logged into WordPress admin.

```
// From WordPress admin
fetch('/wp-json/pulserank/v1/reports/overview?days=7', {
    credentials: 'same-origin'
});
```

##### Nonce Authentication

**Best for:** Frontend AJAX requests

```
fetch('/wp-json/pulserank/v1/reports/overview?days=7', {
    headers: {
        'X-WP-Nonce': wpApiSettings.nonce // wp_create_nonce('wp_rest')
    }
});
```