{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"Using the REST API from JavaScript","description":"API documentation for Celonis APIs.","siteUrl":"https://developer.celonis.com/","keywords":"celonis developer portal, celonis apis, celonis api reference docs","lang":"en-US","llmstxt":{"hide":false,"description":"Celonis API documentation","sections":[{"title":"API Docs","description":"Available Celonis API Docs","includeFiles":["**/*.md"],"excludeFiles":[]},{"title":"API Specs","description":"All Celonis API specifications","includeFiles":["**/openapi.yaml"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"using-the-rest-api-from-javascript","__idx":0},"children":["Using the REST API from JavaScript"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Client-side (i.e. browser-based) JavaScript will most likely use the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://developer.mozilla.org/en/docs/Web/API/Fetch_API"},"children":["Fetch API"]}," to access Celonis Process Management and will be subject to ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS"},"children":["HTTP access control aka CORS"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["As of today, Celonis Process Management allows every origin by responding with the header ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Access-Control-Allow-Origin: *"]},", but does not allow any additional headers, especially ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Access-Control-Allow-Headers: symbio-auth-token"]},". For that reason the authentication token cannot be sent via HTTP headers. Instead it should be sent as part of the query string by appending ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["?symbio-auth-token=<token>"]}," if no query has been specified yet, or ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["&symbio-auth-token=<token>"]}," if one already exists in your URL."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"getting-the-storage-info-with-javascript","__idx":1},"children":["Getting the Storage Info with JavaScript"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"js","header":{"controls":{"copy":{}}},"source":"const url = 'https://example.symbioweb.com/Collection/Database/_api/rest/info';\nconst tokenQuery = 'symbio-auth-token=<token>';\n\nconst response = await fetch(`${url}?${tokenQuery}`, { method: 'POST' });\nconst info = await response.json();\n","lang":"js"},"children":[]}]},"headings":[{"value":"Using the REST API from JavaScript","id":"using-the-rest-api-from-javascript","depth":1},{"value":"Getting the Storage Info with JavaScript","id":"getting-the-storage-info-with-javascript","depth":2}],"frontmatter":{"seo":{"title":"Using the REST API from JavaScript"}},"lastModified":"2026-02-26T22:05:33.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/cpm/developer/rest-api/how-to/javascript","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}