Is token based authentication for gRPC adds metadata for each call?

I am reading through gRCP authentication and based on what I read, it looks like authentication info (token) is attached as metadata to each call (vs channel).

Did I understand it correctly?

The reason why I am so puzzled is that gRPC is touted to be a protocol to minimize amount of traffic. It looks like adding JWT token to each call would be quite an overhead.