Headless
Use a WordPress admin Application Password. We verify roles against users/me.
users/me
Opens WordPress authorization and returns here already signed in.
Requires WORDPRESS_BASE_URL to be set and the user to have the administrator role.
WORDPRESS_BASE_URL
administrator