## Authentication
The Order REST API uses basic authentication.
Basic authentication involves sending a user name and a password with every request.
To find your user name and password, in Sitecore CDP, on the navigation pane, click **Settings** > **API access**:
- The user name is the **Client key**.
- The password is the **API token**.

You must include the user name and password in every request you make. For example:

```
curl -X GET '{baseURL}/v2.1/orders' \ 
-u '{YOUR_USERNAME}:{YOUR_PASSWORD}' \ 
-H 'Accept: application/json'
```