For services that support OAuth, the OAuth authorization flow should be preferred over directly requesting static API keys, because OAuth tokens have expiration times, can be revoked, and have clearly defined authorization scopes.