An API key is a unique identifier used to authenticate a user, developer, or calling program to an API. It controls access to the API, ensuring only authorized parties can interact with the system, thereby enhancing security and usage tracking.