To authenticate API requests, we use a combination of business Api secrets and a developer account user ID. Every transaction logged in the system is accompanied by the specific user which performed the operations and thats the reason as to why we have the developer User Id.