---
schema_version: "1"
id: d363acce9c3f8466812c72392e57dc71e4f4fc02aea7f487336099e1a4be51f2
title: Authentication
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/marketing-cloud/guides/mc-einstein/mc-einstein-auth-through-mc-oauth.md
canonical_url: https://developer.salesforce.com/docs/marketing/marketing-cloud-einstein/guide/mc-einstein-auth-through-mc-oauth.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: 86bf5d6a53e40707007a4609c300f06d9c3477bfb44e7c60d8e0fff0a17918f5
products:
  - Einstein for Marketing Cloud Engagement
  - Marketing Cloud
---
# Authentication

To make an authenticated call to a Marketing Cloud Engagement Einstein service, obtain an OAuth access token. For server-to-server API integrations, review [Access Token for Server-to-Server Integrations](https://developer.salesforce.com/docs/marketing/marketing-cloud-einstein/mc-app-development/access-token-s2s.md). For web or public app integrations, review [Access Token for Web and Public App Integrations](https://developer.salesforce.com/docs/marketing/marketing-cloud-einstein/mc-app-development/access-token-app.md).

After you get an access token, use it make your request. You'll need your account’s [tenant-specific subdomain](https://developer.salesforce.com/docs/marketing/marketing-cloud-einstein/mc-apis/your-subdomain-tenant-specific-endpoints.md).

## URL Host Parameters

| Name   | Type   | Description                                                                                                                   |
| ------ | ------ | ----------------------------------------------------------------------------------------------------------------------------- |
| Region | string | Required. A region identifier that matches the region of your Marketing Cloud Engagement account. Possible values are: us, eu |

## Request Header Parameters

| Name          | Type   | Description                                                                                                                |
| ------------- | ------ | -------------------------------------------------------------------------------------------------------------------------- |
| Authorization | string | Required. A string that starts with `SFMC`, followed by your access token. Ensure there is a space between the two values. |
| X-API-TSE     | string | Required. Your tenant-specific subdomain.                                                                                  |

## Example Request

```
HOST: "https://api.YOUR_REGION.sfmc-einstein.com"

POST "/ecs/v1/api/asset/edit"

HEADERS:
{
  "Authorization" : "SFMC YOUR_ACCESS_TOKEN",
  "X-API-TSE" : "YOUR_SUBDOMAIN",
  "Content-Type" : "application/json"
}
```