Dropping in just to confirm this fact. API keys were intended for additional validation and constraints for external integrations which our own ui (customized) calling our own services with the current user’s rights are not. So we removed this requirement as unnecessary friction last year.