On Pro+ plans, generate keys under Profile → API keys. The key is shown once and starts with cbio_.
Send it in the request header: Authorization: Bearer cbio_…. Scopes (biolinks.read, analytics.read …) limit what a key can do. Identity, password, 2FA and admin endpoints are never reachable with a key.
See the API documentation for all endpoints.
