I am logged in with an email address, password, MFA, and a full administrator, and I am still not able to generate an API key.
There's an option in the Organization settings way at the bottom to enable the API Generation. No one can do it until that's saved!