To clarify that last part. If you see the alert “Observatory wants to use the login keychain” when you open the Accounts Preferences, or after entering the API key, you’ll need to enter your password, so Observatory can put the API key and/or ESO login credentials in your keychain.