Use an admin API key. Keys are issued in the dashboard and never stored in your browser.
Public landing page: WinBox · API docs: /docs