You must authenticate your API calls by including a JWT token in the Authorization header of every request you make. You can obtain a token by passing your clientKey and clientSecret to the Get Token endpoint.
Secure your API key
Do not commit your secret keys to git, or use them in client-side code.