Ask Docs tells me API tokens are under Settings → API, but it's actually in a separate “API section” underneath settings. It was confusing and hard to see if I didn't scroll all the way down.