Lower security or no API access?

“API Access is currently incompatible with security key 2-step verification. Change to SMS or an authenticator app to use these features.”

I must choose between lesser security or no API access? I used to be able to create API keys with a physical security key.