# Authorization The data stream API uses a private token and a public token to provide authorization. **Private token** The private token is used by the REST API to send data to the data stream and must be kept secret. Anyone with that token can write to the data stream. **Public token** The public token is used in the composition script and can be known by anyone. With the public token, you can listen to the data coming from the data stream. To locate data stream tokens, or create new ones, navigate to the Dashboard and select Data Stream Manager in the user menu. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://developer.singular.live/data-stream-api/authorization.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.