You can find the API key in the Contlo Dashboard.
Authentication to the API is performed by passing X-API-KEY in the header section.
All API requests must be made over HTTPS. Calls made over plain HTTP will fail. API requests without authentication will also fail. Your api keys carry many privileges, so be sure to keep them a secret.