All requests must contain an API key used to authenticate the validity of the request.  The API key is an alphanumeric string, e.g. 65121C2FPFAB254D13DCE86EB82DF38D, which is issued to each vendor separately.  Different keys are issued for each site.