Use a Bearer API key
http
Authorization: Bearer <server-side-api-key>Every v1 operation requires a server-side Bearer key. Keep separate keys for development and production, grant only the catalog, comparison, and watchlist access the integration needs, and rotate a key if it may have been exposed.
Identify price-watch clients
The current price-watch operations also require X-Price-Compare-Client-Id. Use one stable, non-secret identifier for the same customer or workspace so list, update, and delete operations address the correct watches.
http
X-Price-Compare-Client-Id: workspace-acme