It requires a client certificate to authenticate (client authenticates to the server) The Rest API provides just one endpoint: https://localhost:8443/api that returns the value it works for ...

There could be extension and application use cases deployed on Kyma runtime where the workload is required to connect to an external system. There external system could have been secured with OAuth2, ...