The Advocate API utilizes API keys to authenticate requests. To manage and access your API keys, please contact Advocate directly. Please be mindful of the sensitivity of your API keys as they carry significant privileges. Ensure their security by refraining from sharing your secret API keys in publicly accessible areas such as GitHub or client-side code. API authentication is performed using one of two types of keys. Keys with the prefix test_ are for testing and will return mock data. Keys with the prefix live_ will return live data. It is mandatory to make all API calls over HTTPS. Calls made over plain HTTP will result in failure, as will API requests without proper authentication. Once you have obtained a valid API key, include it as a bearer token in the Authorization header of every request: