What are allowed domains?

What are test domains?

What is “Your API Key” used for?