Use a Token

Every authenticated API call requires an Access Token to be passed in the Authorization header as a Bearer Token or it will return a 401 Unautorized HTTP status.

curl https://api.box.com/2.0/users/me \
    -H "authorization: Bearer EGmDmRVfhfHsqesn5yVYHAqUkD0dyDfk"