How is access to API and authentication handled?

Answer:
Access is granted privately via a unique authentication token per client. Tokens are not tied to specific IP addresses; usage limits and billing are linked to the token.

Source