The MagicKit API uses a key passed through an authorization header, with your own unique API key which can be found within your account settings, to authenticate all requests.
All data is submitted and returned as JSON, with the appropriate HTTP headers depending on if your request was successful or not (200, 404, 401, 429, 400).
All requests are to be made in the following format:
curl -X GET https://www.magickit.io/api/{endpoint} -H "Authorization: X-MAGICKIT-TOKEN {key}"
If you need to, you can change this or turn off API access in Account > API & Security.