Client secret (Management API)
For managing apps, schemas, and notification rules, pass your client secret as a Bearer token:API key (Event Ingestion)
For ingesting events, pass your app’s API key in thex-api-key header:
Error responses
Missing or invalid credentials return401 Unauthorized: