Sign in to get a 90-day JWT. Paste it into /docs (which needs its own sign-in) → Authorize to call secured endpoints.