Contentful uses API keys for authentication:

• CDA: Content Delivery API key (read-only published content)
• Preview API: Content Preview API key (read-only all content)
• CMA: Personal Access Tokens or OAuth (read-write access)

Example: Authorization: Bearer YOUR_ACCESS_TOKEN