> For the complete documentation index, see [llms.txt](https://documentation.carbonregistry.com/documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.carbonregistry.com/documentation/carbonregistry.com/api/apps/authentication/authenticate-as-an-app.md).

# Authenticate as an App

### About Authenticating as an ICR App

You must authenticate as an ICR App in order to make REST API requests as the application. For example, if you want to use the API to generate an installation access token for accessing organization resources, list installations across organizations for your app, or create new user / organization pairs with your app auto installed on the organization, you must authenticate as an app.

If a REST API endpoint requires you to authenticate as an app, the documentation for that endpoint will indicate that you must use a JWT to access the endpoint. 

### Using a JSON Web Token (JWT) to Authenticate as an ICR App

1. Generate a JSON Web Token (JWT) for your app. For more information, see "[Generating a JSON Web Token (JWT) for an ICR App.](/documentation/carbonregistry.com/api/apps/authentication/generate-a-jwt.md)"
2. Include the JWT in the `Authorization` header of your request. In the following example, replace `YOUR_JWT` with your JWT. 

{% tabs %}
{% tab title="Bash" %}

<pre class="language-bash"><code class="lang-bash">curl --request GET \
<strong>--url "https://api.carbonregistry.com/app/installations" \
</strong>--header "Authorization: Bearer YOUR_JWT"
</code></pre>

{% endtab %}

{% tab title="Javascript" %}

```typescript
await axios.get(
`https://api.carbonregistry/app/installations`,
{
  headers: {
    Authorization: `Bearer ${YOUR_JWT}`,
    },
  },
)
```

{% endtab %}
{% endtabs %}