Hi,
when you call login method - it returns Access-Token: {3099F79B-4550-47F4-883E-82B8B275243F} in response headers.
see example of execution of methods via CURL at ServiceRequiresLogin in Delphi - #10 by EvgenyK
Note: Pay attention that verbose mode (-v) is required
later you should provide received guid in request header for accessing to protected service’s methods.
Note: You should use TROHttpApiSimpleAuthenticationManager otherwise Access-Token in headers won’t be work as expected.
see HttpApi Authentication sample for more details.