An API key defined in your User API Client (or Delegate API Client - this feature is available only to customers enabled with delegation functionality). API Clients are as managed in the Embedder Portal

The authentication token representing the user. This will be included in the login response object.

The Webhooks key can be found in the API Credentials tab in your Portal Page.