A settings-page secret field with fixed-length masking, reveal/hide with optional auto re-mask, copy-to-clipboard with a visible failure fallback, and a two-step confirm before regenerating.
npx shadcn@latest add @zyeon/api-key-fieldZyeon UI limits how often it can be asked, and API Key Field hasn't had its turn. Its source will show here once it has.