...
Access to the atom feed is normally unrestricted. However, results returned will be limited to those items to which the currently logged-in user has access. Only public items will returned for non-logged-in users.
Additionally, a token (also often referred to as a key) can be passed with the request through the http header 'Avalon-Api-Key'. If a matching token is found in Avalon's database, all records will be accessible. Creating and viewing tokens can be done via rake tasks.
...