Medplum doesn't support basic authentication, right? Have to grab the OAuth token? (For machine-machine with client id/secret)

Yes we support basic auth! https://www.medplum.com/docs/sdk/classes/MedplumClient#setbasicauth

Also consider adding access controls - background/guide https://www.medplum.com/docs/auth/authentication-integration-patterns#devicehost-authentication