Authentication & Access
All APIs require an API key or JWT token. Authentication occurs via:
x-md-tokenheader (JWT or Bearer token)Per-application API keys (generated in Dev Portal)
Authentication tokens are scoped to environments (e.g., TEST vs PROD) and permissions (e.g., UM Write, Read-Only).