What does the evidence say? Wa-pa-pa-pa-pa-pa-pow!
The API key is only used in the current browser session and is never saved.
To leverage all LeverLab features, the API key needs both read and write access.