API keys are visible to admins and owners only.
An API key can read and write everything in this workspace, and the webhook signing secret can be used to forge messages that look like they came from Cortex — so both are kept to the people who can already do those things. Ask an admin if you need one.