Two tokens are required on every API call except one:

1. Your partner token you received when you joined the developer program
2. A user token that is obtained using the Tokens endpoint

You should probably start there.