Web services enable other systems to login to Moodle and perform operations.
Web service tokens are read-once. Once used they are no longer available. If you forget it or need it, you can create a new one.
Most of the time, the client application will retrieve the key (token) for a user. However, it is still possible for a user to view the key and to regenerate it.