You can now create personal access tokens for the Lumicast API under Account → Access tokens in the settings. A token acts on your behalf in every workspace you belong to, with full or read-only access.
Give a token an expiry of 30, 60 or 90 days, or none, see when it was last used, and rotate or delete it whenever you need to.