It's much easier to open ZAP/Burp and intercept iOS/Android traffic to grab API keys.