Authentication for the API is handled with an API key that must be provided as a X-Api-Key header for every request.
API keys are supposed to be a secret that only the client and server know. Please remember to not share them with anyone.
You can find your API keys when authenticated in your Starleads profile:

Api key menu option