Once used, something is set, somewhere. But there isn’t an obvious “Clear API Token” button.
Use-case: Once someone is done using the API explorer, it’s comforting to be able to discard the token. This is akin to “log in” and “log out”, but the system effectively only has a “log in”.
Yes, Authorized doesn’t tell me “click here to clear authorization token”.
And while there’s indeed a icon in API Token Details, it was too far away from anything for me to discover it this time. (I think I’ve probably found and used it in the past.)