Every call to the OP3 API requires a bearer token associated with a valid API Key.
Since OP3 does not store email addresses, the API Key is used as your stable identity, and the associated bearer token as the credential to use in calls.
You'll need to pass a human verification check in order to make any changes.