API keys authenticate systems sending data into PulseServe — alerts from Alertmanager, inbound email, software-inventory scans — not user logins.
Where to find it
Admin Console → API Keys tab.
What to try
- Review the 4 ingest endpoints listed (software-inventory, Alertmanager, generic, email) and copy one's URL.
- Issue a new key with a name and scope.
- Revoke it.