Nice! Looks good.
I need to update the docs, but you can now use headers for the api authentication instead of query params. You can change your request to be
curl -i -sS -X GET "https://site/unread.json" \
-H "Api-Key: api-key" \
-H "Api-Username: api-username"