All API requests require an API key to be sent in the Authorization header.
Once you have your API key it needs to be sent as an
POST /graphql? Authorization: Bearer <api_key>
Your API key is associated with your own account and so the
viewerquery will return your user account details.
When using the API explorer you simply need to be logged in.