The SubscriberCRM API uses HTTP Basic authentication. The credentials are authenticated against the SubscriberCRM users.