Authentication

All requests carry an Authorization header. The source collection mixes two forms:

• Items 1–16, plus media_template (14): a raw bearer/JWT value hardcoded in the collection.
• Items 17–28: a collection variable, {{rml_token}}.

The hardcoded JWT found in the source file has been redacted from this document — it decodes to a live-looking UAT credential (user_id, customer_id, and an expiry in 2030) and should not be circulated in documentation. Standardize all calls on a token variable:

Authorization: {{rml_token}}
Content-Type: application/json