User getting 403 response when they shouldn't be

Hello @JamesBedont, according to the doc, "API key is required in most REST calls, (except session management and some system calls)"

My suggestion is to create a generic App for use in requests that do not fit into existing Apps.