The API offers two kind of user journey:
In the previous user journey description the header reference as x-api-key is a secret key obtained during the subscription process.
To use the API, you should obtain from the user an access token with appropriate scope(s) as described in the endpoint detail.
DECATHLON login application is the federated identity manager and the doc is available here.