Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • AI for business
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Yandex Vision OCR
  • Getting started
  • Access management
  • Pricing policy
    • API authentication
  • Audit Trails events
  • Release notes
  • FAQ
  1. API references
  2. API authentication

Authentication with the Yandex Vision OCR API

Written by
Yandex Cloud
Updated at November 26, 2025

Get your account data for authentication:

Yandex or federated account
Service account
  1. Get an IAM token for a Yandex account, federated account, or local account.
  2. Get the ID of the folder for which your account has the ai.vision.user role or higher.
  3. When accessing Vision OCR via the API, provide the received parameters in each request:
  • Specify the IAM token in the Authorization header.
  • Specify the folder ID in the x-folder-id header.
Authorization: Bearer <IAM_token>
x-folder-id: <folder_ID>

Vision OCR supports two authentication methods based on service accounts:

  • With an IAM token:

    1. Get an IAM token.

    2. Provide the IAM token in the Authorization header in the following format:

      Authorization: Bearer <IAM_token>
      
  • With API keys.

    Use API keys if requesting an IAM token automatically is not an option.

    1. Get an API key.

    2. Provide the API key in the Authorization header in the following format:

      Authorization: Api-Key <API_key>
      

Do not specify the folder ID in your requests, as the service uses the folder the service account was created in.

See alsoSee also

  • What roles are required for performing operations

Was the article helpful?

Previous
Pricing policy
Next
Overview
© 2025 Direct Cursus Technology L.L.C.