generated: '2026-08-19' method: searched source: https://developer.cisco.com/docs/crosswork/network-controller/intent-based-service-provisioning-getting-started/ docs: - https://developer.cisco.com/docs/crosswork/network-controller/intent-based-service-provisioning-getting-started/ - https://developer.cisco.com/docs/crosswork/network-controller/fault-management-getting-started/ - https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/crosswork-infrastructure/7-1/AdminGuide/b_CiscoCrossworkAdminGuide_7_1/m_security.html summary: types: - apiKey - http api_key_in: - header primary_scheme: JWT bearer token minted by the Crosswork instance itself note: 'Every Crosswork northbound API is protected by a JWT bearer token that the CUSTOMER''S OWN Crosswork deployment issues — there is no Cisco-hosted authorization server and no API key to obtain from a developer portal. The refined OpenAPI files carry this as `bearerAuth` (NCAHI/CDG/ZTP), `Bearer` (Crosswork Workflow Manager) and, on two of the older CNC/COE service-model specs, `basicAuth` — a spec-level inconsistency worth noting: the same product family declares three different scheme names for what the documentation describes as one JWT flow.' token_flow: style: two-step ticket exchange (CAS-style), not OAuth 2.0 steps: - step: 1 name: Obtain a Ticket Granting Ticket (TGT) method: POST url: https://{cnc-host}:{cnc-port}/crosswork/sso/v1/tickets content_type: application/x-www-form-urlencoded body: username and password of a Crosswork account - step: 2 name: Exchange the TGT for a JWT method: POST url: https://{cnc-host}:{cnc-port}/crosswork/sso/v2/tickets/jwt body: the TGT plus the forwarding service URL use: 'Authorization: Bearer {jwt}' source: https://developer.cisco.com/docs/crosswork/network-controller/intent-based-service-provisioning-getting-started/ authorization: model: RBAC note: API-level access is controlled by RBAC policies configured inside the Crosswork instance. There are no OAuth scopes — this repo therefore carries no scopes/ artifact, which is a correct absence rather than a gap. admin_guide: https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/crosswork-infrastructure/7-1/AdminGuide/b_CiscoCrossworkAdminGuide_7_1/m_security.html oauth2: false mtls: false schemes: - name: bearerAuth type: apiKey in: header parameter: Authorization sources: - openapi/cisco-crosswork-add-credentials-api-openapi.yml - openapi/cisco-crosswork-add-data-gateway-enrollments-api-openapi.yml - openapi/cisco-crosswork-add-destinations-api-openapi.yml - openapi/cisco-crosswork-add-nodes-devices-api-openapi.yml - openapi/cisco-crosswork-add-policies-api-openapi.yml - openapi/cisco-crosswork-add-providers-api-openapi.yml - openapi/cisco-crosswork-add-tags-api-openapi.yml - openapi/cisco-crosswork-add-via-csv-file-api-openapi.yml - openapi/cisco-crosswork-alert-api-api-openapi.yml - openapi/cisco-crosswork-authconfig-api-openapi.yml - openapi/cisco-crosswork-command-api-openapi.yml - openapi/cisco-crosswork-crosswork-health-api-api-openapi.yml - openapi/cisco-crosswork-custom-files-api-openapi.yml - openapi/cisco-crosswork-cwm-adapters-api-openapi.yml - openapi/cisco-crosswork-cwm-defaults-api-openapi.yml - openapi/cisco-crosswork-cwm-event-api-openapi.yml - openapi/cisco-crosswork-cwm-event-type-api-openapi.yml - openapi/cisco-crosswork-cwm-forms-api-openapi.yml - openapi/cisco-crosswork-cwm-jobs-api-openapi.yml - openapi/cisco-crosswork-cwm-mcp-api-openapi.yml - openapi/cisco-crosswork-cwm-payload-api-openapi.yml - openapi/cisco-crosswork-cwm-public-key-api-openapi.yml - openapi/cisco-crosswork-cwm-resources-api-openapi.yml - openapi/cisco-crosswork-cwm-scheduler-api-openapi.yml - openapi/cisco-crosswork-cwm-secrets-api-openapi.yml - openapi/cisco-crosswork-cwm-tasks-api-openapi.yml - openapi/cisco-crosswork-cwm-worker-profiles-api-openapi.yml - openapi/cisco-crosswork-cwm-workers-api-openapi.yml - openapi/cisco-crosswork-cwm-workflow-api-openapi.yml - openapi/cisco-crosswork-delete-credentials-api-openapi.yml - openapi/cisco-crosswork-delete-data-gateway-enrollments-api-openapi.yml - openapi/cisco-crosswork-delete-destinations-api-openapi.yml - openapi/cisco-crosswork-delete-nodes-devices-api-openapi.yml - openapi/cisco-crosswork-delete-policies-api-openapi.yml - openapi/cisco-crosswork-delete-providers-api-openapi.yml - openapi/cisco-crosswork-delete-tags-api-openapi.yml - openapi/cisco-crosswork-delete-via-csv-file-api-openapi.yml - openapi/cisco-crosswork-file-controller-api-openapi.yml - openapi/cisco-crosswork-get-credentials-api-openapi.yml - openapi/cisco-crosswork-get-data-gateway-enrollments-api-openapi.yml - openapi/cisco-crosswork-get-destinations-api-openapi.yml - openapi/cisco-crosswork-get-inventory-jobs-api-openapi.yml - openapi/cisco-crosswork-get-nodes-count-api-openapi.yml - openapi/cisco-crosswork-get-nodes-devices-api-openapi.yml - openapi/cisco-crosswork-get-nodes-summary-api-openapi.yml - openapi/cisco-crosswork-get-policies-api-openapi.yml - openapi/cisco-crosswork-get-providers-api-openapi.yml - openapi/cisco-crosswork-get-tags-api-openapi.yml - openapi/cisco-crosswork-health-controller-api-openapi.yml - openapi/cisco-crosswork-image-controller-api-openapi.yml - openapi/cisco-crosswork-image-platform-controller-api-openapi.yml - openapi/cisco-crosswork-map-or-unmap-devices-to-a-data-gateway-api-openapi.yml - openapi/cisco-crosswork-misc-api-openapi.yml - openapi/cisco-crosswork-password-api-openapi.yml - openapi/cisco-crosswork-put-replace-destinations-api-openapi.yml - openapi/cisco-crosswork-put-replace-providers-api-openapi.yml - openapi/cisco-crosswork-rbac-api-openapi.yml - openapi/cisco-crosswork-remove-tags-from-nodes-devices-api-openapi.yml - openapi/cisco-crosswork-replaces-credentials-api-openapi.yml - openapi/cisco-crosswork-replaces-nodes-devices-api-openapi.yml - openapi/cisco-crosswork-troubleshooting-api-api-openapi.yml - openapi/cisco-crosswork-update-credentials-api-openapi.yml - openapi/cisco-crosswork-update-data-gateway-enrollments-api-openapi.yml - openapi/cisco-crosswork-update-destinations-api-openapi.yml - openapi/cisco-crosswork-update-nodes-devices-api-openapi.yml - openapi/cisco-crosswork-update-policies-api-openapi.yml - openapi/cisco-crosswork-update-providers-api-openapi.yml - openapi/cisco-crosswork-update-via-csv-file-api-openapi.yml - openapi/cisco-crosswork-version-api-api-openapi.yml - name: basicAuth type: http scheme: basic sources: - openapi/cisco-crosswork-data-api-openapi.yml - openapi/cisco-crosswork-flat-l2vpn-provision-api-openapi.yml - openapi/cisco-crosswork-flat-l2vpn-retrieval-api-openapi.yml - openapi/cisco-crosswork-flat-l3vpn-provision-api-openapi.yml - openapi/cisco-crosswork-flat-l3vpn-retrieval-api-openapi.yml - openapi/cisco-crosswork-get-api-openapi.yml - openapi/cisco-crosswork-ietf-l2vpn-nm-provision-api-openapi.yml - openapi/cisco-crosswork-ietf-l2vpn-nm-retrieval-api-openapi.yml - openapi/cisco-crosswork-ietf-te-provision-api-openapi.yml - openapi/cisco-crosswork-ietf-te-retrieval-api-openapi.yml - openapi/cisco-crosswork-l2vpn-route-policy-provision-api-openapi.yml - openapi/cisco-crosswork-l2vpn-route-policy-retrieval-api-openapi.yml - openapi/cisco-crosswork-l3vpn-route-policy-provision-api-openapi.yml - openapi/cisco-crosswork-l3vpn-route-policy-retrieval-api-openapi.yml - openapi/cisco-crosswork-operations-api-openapi.yml - openapi/cisco-crosswork-post-api-openapi.yml - openapi/cisco-crosswork-root-api-openapi.yml - openapi/cisco-crosswork-yang-library-version-api-openapi.yml - name: Bearer type: apiKey in: header parameter: Authorization description: 'JWT Authorization header using the Bearer scheme. Example: "Authorization: Bearer {token}"' sources: - openapi/cisco-crosswork-cwm-workflow-api-openapi.yml checked: '2026-08-19'