Why do some endpoints require a username and password, and where do we set those up?

I am trying to access the Estimate Shipping endpoint, and it is failing with a 401 regardless of what username and password I use. I was assuming these were admin usernames and passwords, but this doesn't seem to be correct. Where are these passwords and users set up and why do you not just use the API token I created to authenticate these endpoints?