The API uses API keys to authenticate requests. There are 2 ways to provide the API key: using an Authorization header with a bearer token, and using basic auth. Please note that if you use the basic auth method, the username is the API key while the password should always be blank.

curl -H 'Authorization: Bearer <TOKEN>' ''

You can view and manage your API keys on the dashboard. Your API keys carry many privileges, so be sure to keep them secure!
Do not share your secret API keys in publicly accessible areas such as GitHub, client-side code, and so forth.

All API requests must be made over HTTPS. Calls made over plain HTTP will redirect to HTTPS. API requests without authentication may also fail.