@Duck999 your observation is correct: the/backup
API requires the initial “operator”/super-user token to pass authentication. It’s not (currently) possible to create a new token with those permissions.
Unless you explicitly deleted it, you should be able to find the initial token in the UI. It’ll be under Data
> Tokens
, with the name <initial user>'s Token