# Bugcrowd API

All parsers which using API have common basic configuration step but with different values. Please, [read these steps](https://docs.defectdojo.com/supported_tools/parsers/api/) at first.

In `Tool Configuration`, select `Tool Type` to “Bugcrowd API” and `Authentication Type` “API Key”.
Paste your BlackDuck API token in the `API Key` field.
Set your API key directly in the format `username:password` in the API Token input, it will be added to the header `'Authorization': 'Token {}'.format(self.api_token),`

For each product, you can configure 2 things:

- `Service key 1`: the bugcrowd program code (it’s the slug name in the url for the program, url safe)
- `Service key 2`: the bugcrowd target name (the full name, it will be url-encoded, you can find it in https://tracker.bugcrowd.com//settings/scope/target_groups)

- It can be left empty so that all program submissions are imported

That way, per product, you can use the same program but separate by target, which is a fairly common way of filtering/grouping Bugcrowd.
Adding support for a 3rd filtering would be possible with `Service Key 3`, feel free to make a PR.