Service
Health Check is the only endpoint that needs no
Api-Token header. Everything else in the API requires one.
That makes it the right first call when setting up an integration: if health answers, the host and the network path are fine, so any later failure is about the token or the request rather than about reachability.