Is your feature request related to a problem? Please describe:

Account security

Describe the solution you'd like:

A list of all API keys, envvar names, and their associated (minimal) required permissions in the documentation

Describe alternatives you've considered:

none

Additional context:

none