The Doradus REST API can be managed by an embedded Jetty server or an external web server such as Apache Tomcat. All REST commands support XML and JSON messages for requests and/or responses as used by the command. By default, Doradus uses unsecured HTTP, but HTTP over TLS (HTTPS) can be configured, optionally with mandatory client authentication. See the Doradus Administration document for details on configuring TLS.The REST API is accessible by virtually all programming languages and platforms. GET commands can also be entered by a browser, though a plug-in may be required to format JSON or XML results. The curl command-line tool is also useful for testing REST commands.