# Authentication The MMS API v2 uses API keys to authenticate requests. API Key is assigned to a specific gym location only and has granular permissions. You can contact our [team](mailto:integration@egym.com) to request it. (API Key can be requested for test location). Please make sure to keep them secure! Authentication to the MMS API v2 is performed via the custom request header `x-api-key`. You need just provide API Key as a value. We force to use HTTPS only. Calls made over plain HTTP will fail.