> For the complete documentation index, see [llms.txt](https://docs.cortex.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cortex.io/api/readme.md).

# REST API operations

## Cortex API

The Cortex REST API provides programmatic access to your entities, Scorecards, Workflows, and more.

### Authentication <a href="#authentication" id="authentication"></a>

All requests to the Cortex API need to provide an `Authorization: Bearer <token>` header, where `<token>` is an API key created in the Settings page of your workspace.

| Security Scheme Type:     | http   |
| ------------------------- | ------ |
| HTTP Authorization Scheme | bearer |
| Bearer format:            | JWT    |

### Operations

See the sub-pages in this section for all available operations. Throughout these documentation pages, click **Test it** under an operation to try it out directly on the documentation page:

<div align="left"><figure><img src="/files/NHPNWINi97S3IrsoAoVD" alt="" width="563"><figcaption></figcaption></figure></div>

### Rate limiting

The Cortex API limits requests to 1000 per minute per client. The body size of any given request has a maximum of 2MB.

If you attempt too many requests in a short period, a `429` error will be returned with a `Retry-After` header. If you are hitting rate limits frequently, please contact your Cortex Customer Success Manager to discuss your use case.

{% hint style="info" %}
API rate limits are subject to change. Customers will be notified of any changes made to the rate limits.
{% endhint %}