Reading the BMS API Instructions:
In GET requests, the information related to the call is expected in the query string. There are different expectations for POST and PATCH.
The API key and token should be in the header to prevent them from being easily exposed.
Here is a basic summary on postman examples and reading the BMS API documentation, along with 2 links to 2 versions of documentation. They are identical and built off the same file, just a different presentation.
https://api.rmaster.com/endpoints/
https://api.rmaster.com/docs/endpoints/
GET Example
Postman Equivalent
POST Example
Create Lead product notes example