Your API requests are authenticated using API keys. Any request that doesn't include an API key will return an error. Head to the API page under Settings, then create and copy a new API token.
Note: If your API key is publicly visible, you should not select "read" permissions for that key. API Keys with "read" permissions should not be visible to the public.
The api key management screen
All API keys should be used as Bearer tokens as follows: