JWT Token:
Get token with email/password, use in Authorization: Bearer <token>
API Key:
Generate in Tenant Admin → API Keys, include in X-API-Key header
OAuth2 Client Credentials:
Request:
Response: access_token (1h expiry)
Use in Authorization: Bearer <token>