You need a client_id and client_secret to interact with the Cobalt API. You will also need an access_token for each user which can be obtained in through the Cobalt Link flow.
Authentication Headers
Example request:
API Documentation
Introduction
Cobalt API