The shipped API surface:

Authentication on all billing endpoints is a Bearer token; see authentication.