Try it out sends real requests to https://api.allowid.eu with the key you type under Authorize. The key stays in this tab: it is not stored, and this page sends it nowhere but the API. Use a key made for testing, with only the scopes you are trying — people changes made here reach your controllers like any other.