An API key is a personal access token that lets this app talk to ReBrickable on your behalf. It's similar to giving the app permission to add parts to your inventory.
ReBrickable requires a personal API key so third-party tools can safely update your inventory. This app uses your key only when you add a part, and never stores your password. If you ever change your mind, you can disable the key instantly on ReBrickable.