It is my understanding that it is possible to use an API key, stored in a (reasonably well protected) local file, to access a CyberArk account programmatically. (The goal here is to avoid storing passwords in a configuration file, for example, and having to update such configuration when the password changes, which happens regularly.)

I am familiar with the API key concept, and have used it for many other online services. In those other cases, it was always straightforward to find instructions on how to obtain an API key. I am having no such luck for CyberArk.

Can someone please point me to instructions for obtaining a CyberArk API key?