When the user or application requires access to Context Store, they must supply the authorization token with the Context Store request. If the user or application is accessing Context Store for the first time, the authorization token must be requested from the ContextStoreREST snap-in. When the ContextStoreREST receives an API request, it verifies the existence and validity of the authorization token. If the token is valid, Context Store returns the data requested according to the access level that the user or application is granted