Exchange your API client_id / client_secret for a short-lived bearer token, then send it as Authorization: Bearer <access_token> on subsequent requests.

Obtaining credentials: generate them in Settings → Integrations → Custom API. Treat the secret like a password — it is shown only once.