The Stranded Subscriber says
"You include that header in every request. It's your access token — proves you have a valid subscription with sufficient credits. The agent calls verifyPermissions before doing any work. Short on credits? 402. Which is exactly what happened to me."