An API key defined in your User API Client, or Delegate API Client if your account has delegation enabled. Manage API Clients in the Embedder Portal.

An authentication token representing a logged-in user. This token needs to be stepped up before it can be used to authorize operations that require Strong Customer Authentication (SCA).

An authentication token representing a logged-in user who has completed step-up authentication. A stepped up token is valid for operations that require Strong Customer Authentication (SCA).

Find the webhooks key in the API Credentials tab of the Embedder Portal.