Keys are minted in the Console, and the API serves no key operation.
Authentication
Two ways in
API keys for your systems, the console for your people. What each credential proves, and what a refusal looks like.
The Platform is reached two ways, both act for one Tenancy, and every lending operation exists on both.