Two ways in: paste a token from your LMS's API Browser, or mint one with an OAuth2 app's credentials.
https://
The API Browser mints that token from your logged-in session, which is why it never asks for a Client ID or Secret. It is good for up to a day, then you repeat these steps. There is no supported way for an outside tool to mint one without an OAuth2 app.
localStorage
Admin menu → API and SSO → API Credentials, on an app with the Resource Owner Password Credentials grant enabled. One-time setup; after that the tool can remember the domain and Client ID.
Requests are relayed through the local server.py because Docebo's API does not permit direct browser calls.
server.py