The Expose server API uses the same authentication method as the expose admin interface itself. So you can use any of the configured user/password combinations as basic authentication.
