The API uses HTTP Token Auth to authenticate requests. This means each request must have an Authorization header (your API key).