Every App's Settings has a Keys & IDs screen - the dashboard's view onto the same App ID and key pair described in the Get Started with Notti guide and the Apps API Reference.
App ID
Shown at the top of the screen with a copy button - this is the app_id you use in every API path (/v1/apps/{app_id}/...).
REST Key and Client Key
Both keys are listed, but masked - the dashboard never displays an existing key's real value, only a placeholder. This mirrors the backend: Notti stores only a hash, so there is nothing to reveal after the fact even if the UI wanted to.
To get a usable key, click Rotate on the row you need. The real value appears once, directly in the screen - copy it immediately. Refreshing the page, navigating away, or rotating again all replace it for good; there is no way to retrieve a rotated-out value afterward.
Rotating a key immediately invalidates the previous one - any client or server still using the old value starts failing with 401 right away. Coordinate a rotation with whoever holds the current key in their config.