Is there any authentication for API calls? i.e. OAuth2

Is there any authentication for API calls? i.e. OAuth2

All but a few calls to the Alloy API require an authentication token to be passed with the call. This token can either be a static API key or a session key obtained after logging in.