You can now build integrations that act on behalf of Examplary users, instead of asking them to paste an API key into your product.
Register an application under Account → Developer → Manage OAuth clients, send users through the authorization code flow, and you get back an access token you can use as a Bearer token on any API request — the same way an API key works today.
Tokens are scoped, so you only ask for the parts of a workspace you actually need, and users see exactly what you asked for on the authorization screen. When someone disconnects your integration, call POST /oauth/revoke to clean up their tokens.
Full walkthrough in the OAuth guide.