Every request to /api/v1/* requires an API key created from the Customer Portal, sent as a bearer token. A key only has access to the scopes it was created with, and those scopes are themselves capped by your plan. A request with a missing/invalid key returns 401, a valid key missing the required scope returns 403 insufficient_scope, and exceeding your plan's rate limit or request quota returns 429.