Using API tokens
While accessing APIs directly, the API Token needs to be passed as the Authorization header so that the request can be authenticated.
headers = {
'Authorization': "IBToken <API Token>",
}
Integrations, do this internally so they only need the API Token.