Maybe this is stupid, but lets take a look at the following scenario: I created an API in Wolfram Cloud and deployed it with private permissions. However, I can't access it from the autogenerated code for it, since it returns 401 unauthorized. How does a private API accept credentials?
The other thing I can do is to deploy it public and protect it by myself, by asking for a certain key, synchronized between the client and the API. But if I do that, someone can send a lot of requests that will return 401, but they will count to my allowed requests per month.
How do I authenticate in a private API?