Use your project's SERVER key. Platform operators sign in with the admin token. The key is kept in a secure, HTTP-only cookie and never exposed to scripts.