The access token should be included in the Headers for each subsequent command request as Bearer Authorization.
Your header should include the access token in the following format
| Authorization | Bearer AccessTokenHere |
Note that each token is only valid for a fixed period of time, after which point it should be regenerated, by default tokens are valid for 7200 seconds (2 hours).
In normal practice, applicationss will use the same token until a 401 error status is received, at which point you will attempt to generate a new token and retry the failed request.