A workspace can have several API keys. Price API admins manage them in the app under Settings → Access Management.
Default key: always present, has full access, and can't be renamed, regenerated or revoked. The Price API app uses it.
Full access: can use every endpoint.
Viewer: can list and view jobs, download results, list buckets and read usage. It gets 403 Forbidden when creating, cancelling or marking jobs, and when polling buckets.
Revoked keys, and the old value of a regenerated key, get 401 Unauthorized immediately.
Every job records the key that created it (api_key_id, api_key_title). /me/usage_today and /me/usage_month show credits per key: the Default key sees the whole workspace, and any other key sees only its own usage.