i can reply to myself, as @kent got the right answer in another post
which in my python script translates to
resp = requests.post(CMDB_LOGIN_URL, headers=CMDB_LOGIN_HEADERS, json=CMDB_LOGIN_DATA)
token = resp.json()['token']
auth_header = {"Authorization": f"Bearer {token}"}
myfilter = {'type_id': 1}
params = {
"filter": json.dumps(myfilter)
}
resp = requests.get(CMDB_VPCS_URL, headers=auth_header, params=params)