REST API authentication docs are misleading about API keys vs tokens

URL to the relevant guide or resource

https://quantum.cloud.ibm.com/docs/en/guides/cloud-setup-rest-api
https://quantum.cloud.ibm.com/docs/en/guides/cloud-setup-untrusted

Select all that apply

• new content request
• typo
• code bug
• out-of-date content
• broken link
• other

Describe the fix or the content request.

The docs are confusing because we're switching between the word "API key" and "token". They are two different concepts:

• API Key is what you get from IQP and usually set in an env var. It is not a "token".
• Token is the "Authorization bearer token". You get it by using an IBM API to exchange your API key for a token. The token is short-lived and more secure.

In the env var, we suggest that you send your API key to IQP, but really we should be sending the Auth bearer token.

For new content requests - if the request is accepted, do you want to write the content?

I will write (or already have written) a draft of the proposed content