For the API, as described in the documentation, the custom header X-Keyfactor-Requested-With is required for admin operations.
Nginx use the custom header using value from the only reference I found.
All API endpoint are available on the OpenAPI document.
terraform apply -var-file=secret.tfvars