Your Pipedrive API key is called a personal API token inside Pipedrive. Click your account name in the top right, then Company settings, Personal preferences and the API tab, and copy it. It has no scopes to pick: it reaches everything your own user can see in that company account.
The steps above come from Pipedrive's guide on how to find the API token and its support article, with the day we last checked them.
If the API tab is missing
That is a permission, not a plan. Pipedrive puts the token behind a permission called Access their own API token, which is on by default, and an admin can turn it off for a whole permission set.
To turn it back on, an admin opens Settings, then Manage users, then Permission sets, picks your set and switches the permission on under Tools and setup. Then reload Personal preferences.
If you belong to more than one Pipedrive company, each one gives you a different token. Open the company you mean to connect before you copy it.
Limit what the token can reach
With no scopes, the token is its user. A token from a sales manager who sees every deal gives the integration every deal too.
To narrow it, create a dedicated Pipedrive user whose visibility covers only the records the integration needs, and make the token there. Treat that user as the real permission setting, and the token itself like a password.
What to do next
If the token is for a sync, read Pipedrive's daily token budget and burst limits next. Every call the integration makes spends from one budget the whole company shares.
In Oneprofile, Pipedrive connects with this token. Paste it when you add the connection, and Oneprofile sees what the token's user sees. From there, import people, organizations, deals or leads into a table and keep them current.