apiToken ​

if provided, all requests to the graphql api must provide the token in the Authorization header