This page explains how you can authenticate your requests to your BRM API Gateway.
Navigate to Settings > Integrations > API Keys

If API Status is Inactive, contact a member of the BRM team to provision a service account for you.
Once you have a service account, click "Create new key" to generate and download a key file. This key file can only be downloaded once and must be stored securely.
This key file must be used to sign a JWT that you will include in your requests to the API Gateway.
When you create the token, set the audience to your storename You must use RSA256 encryption when signing the token.

Example of a setup page here: