API keys
Generating a key that lets a script or a service act as you, and revoking one you no longer want. Team organizations only.
API Keys in the menu holds the same keys as the web console, so a key generated on the phone works from a server and the other way round.
A key gives headless access to your account, for a script or a service that has to act as you with nobody there to sign in.
Personal accounts do not have API keys, and the row is not in their menu. See Personal accounts.
Generating one
Type a name in New key name, after whatever will use the key, then tap Generate key.
The token appears once, on a card under the button marked "COPY THIS NOW - IT WON'T BE SHOWN AGAIN". Copy puts it on the clipboard, and Show and Hide reveal or mask it while the card is up. Once you dismiss the card or leave the screen, the list only shows the first few characters.
The list
Active keys shows each key's name, the start of its token, when it was last used and when it expires. A key whose last use says Never is the easiest kind to get rid of.
Revoking
The bin icon revokes a key after a confirmation that says it "will stop working immediately. This can't be undone." When you are rotating a key, put the replacement in place first and revoke afterwards.
Anything holding a key can reach what you can reach. See Roles and access.