For instance, I take notes and draft stories in Obsidian, an app that’s endlessly extensible via user-created plug-ins. I’ve ...

There are several options for authorization your requests - OAuth Token, Metadata Service (if you're executing your code inside VMs or Cloud Functions running in Yandex.Cloud), Service Account Keys, ...