the API key is auto-generated

Yeah you can change it.

Scoped API keys can only be used for searches.

This is something else. You are using a scoped api key for non-search operations. This is not allowed.