A private code that grants access to a specific API connection, think of it like a key that unlocks the door between two systems. Without it, the connection stays closed. When a vendor asks for your API key, they're asking for that key. Treat it like a password, it should never be shared publicly.