All API calls are authenticated via an API key supplied in the x-api-key header. Pass the key when creating DefiClient and the SDK will attach it automatically.