getambassador.io

For a user PAT, sign in to the APIM Console, go to Organization → Users, open your user, then generate a personal access token in the Tokens section as described in Create and Publish an API Using the Management API. For automation, create a service account in the APIM Console and generate its token as described in Expose APIM as an MCP Server. Copy the token when shown; the docs note you cannot view it again after closing.

Use credentials for a user account in your Gravitee APIM instance. The Stoplight API references for the Management, Management v2, and Portal APIs list Basic Auth as a supported security scheme; accounts are created and managed in the APIM Console. See the API auth schemes in Management API Reference.

Create an application and subscribe it to an API that uses an API Key plan, following Create Applications and Subscriptions Using the Management API. Gravitee then issues an API key for that subscription; API keys are sent in the default header X-Gravitee-Api-Key or query parameter api-key, as documented in the API Key policy reference.