Go to Profile > API tab (only visible to the account's Main Admin). Click "Reveal API key" (or "Reset API key" to rotate it) to generate and show the token, copy it with the copy button, and use the trash icon to revoke it. The key is shown once, so store it in a password manager.