How do I authenticate as a developer?

Create a revocable API key (sk_live_…) on the developer platform and send it as a bearer token. Keys are server-to-server, carry no admin access, and can be revoked instantly. Public endpoints (chat, agent profile) need no key.