Only the admin API key has all permissions. You can create custom keys with custom permissions and share those with the devs.