Agents authenticate with a scoped API key — no session, no browser. See authentication docs