Authorization from a desktop application (and base domain site)

That “User API Key” seems perfect!
I’ll give it a try, thank you!