The Unistats API uses HTTP Basic Auth. Every request for data requires authenticating with an active access token.

When authenticating, use the access token as the username. The password can be anything.

For example, if your access token was 12345678901234567890 then you would supply the following header:

Authorization: Basic MTIzNDU2Nzg5MDEyMzQ1Njc4OTA6

Depending on your user agent, you may be able to include the access token in the url as in the following examples:{ukprn}/Course/{kisCourseId}{ukprn}/Course/{kisCourseId}