All API keys are currently global. We should allow creating per-domain API keys so domain admins can use the API too.