x-api-key
This is your API Key that needs to be sent with every request.
x-user api-key
This is the user auth_key which can be obtained from the /api/v2/system/security/login endpoint and needs to be sent with every endpoint that has a KEY icon against it.