Every request must specify an API key via a request header. Furthermore, the API key must be specified in the URL. The API will return 404 (rather than a 403) in response to a request with a missing or incorrect API key in order to prevent leaking the existence of resources to unauthorized users. EazyTrax-API-Key: <secret key>