Authorization header.
- Environment API keys — access a single environment. Manage them under Environment Settings > API Keys. Each key has scopes that control which environment endpoints it can access. A key without the required scope receives a
403 Forbiddenresponse. - Account API keys — access account-level APIs only. Requests to environment-level APIs with an Account API key return a
403 Forbiddenresponse. Manage them from Account API keys in the dashboard.