Admin — API Key Management
Send this key to your client. They add it as x-api-key: <key> on every request.
x-api-key: <key>
This will immediately block all requests using this key. The client will get a 401 error. This cannot be undone.