Authentication
All write operations require an API token passed in the X-QSC-Token request header.
X-QSC-Token: <your-token>
Token Types
QSC uses two separate tokens depending on the operation:
| Token | Used for | Required permission |
|---|---|---|
| Admin token | Schema updates (/api/v1/searchapp/*) | WRITE on the tenant |
| Feeding token | Data operations and scheduling (/api/v1/data/*, /api/v1/job/*) | WRITE on the tenant |
Where to Find Your Tokens
Tokens are managed in the QSC Admin UI under Security → API Tokens.
Examples
curl
curl -X PUT https://qsc.quasiris.de/api/v1/searchapp/schema/demo/trendware \
-H "Content-Type: application/json" \
-H "X-QSC-Token: <your-admin-token>" \
-d '{...}'
HTTP
PUT /api/v1/data/bulk/qsc/demo/trendware
X-QSC-Token: <your-feeding-token>
Content-Type: application/json
Status Codes
| Code | Description |
|---|---|
401 | Missing or invalid token |
403 | Token does not have the required permission on the tenant |