Authentication

Providers shouldn't authenticate calls when using the recommended decentralized strategy for MetaMask Fiat On-Ramp provider API calls, because the mobile app can't securely store credentials.

If authentication is required, OAuth 2.0 and API key authentication can be used with the centralized calls strategy.