Kalimeratheriso Thanks - API key permissions are here: https://community.wonderwatt.com/d/19-api-token/2
Makes sense to name the API token something like WW or such, which then allows you to easily track and gives you ability to revoke separate integrations if you add API keys for other services.
Trick with setting an expiry is that you you may well forget, but it may be worth setting a reminder a few days out and renewing it and then updating it again in Settings.
Some people use no expiry, which is typically not recommended. Having said that, it's more important to make sure you use one API key for one service.