client_id and client_secret to obtain an access token. These client credentials are not interchangeable with an API key, and you must not send your client secret as a Bearer token.
Bango provisions OAuth 2.0 client credentials for the integration and environment you are using. See OAuth 2.0 authentication for the token request, response, refresh, and error-handling instructions. For user SSO and the distinction between human and API authentication, see Set up authentication.
Use the authentication method configured for your API integration. This page does not imply that credentials can be created, rotated, or revoked through a self-service DVM UI.