Yes, each user must generate their own API key.

This ensures:

• Permissions match the user’s account.
• Audit features can track individual activity.
• API keys should not be shared.

Currently, this process is handled individually by each user.