Sign in and sessions
Server-to-server requests send the tenant API key via the x-api-key header
If you're calling WebOptiva from your own code or scripts instead of a browser, you don't log in with a password.
You send your workspace's API key in a request header instead, and WebOptiva treats that key as proof of who you are.