Currently the API management has not a good UX.

The admin can disable/enable the API (todo: the API is used not only for the apps anymore, the user query sharing uses the API toggle too)

The password for the app API will be set in the user profile page for each user. The password field is only available if the API is enabled. The user cannot read any hint if the API is disabled.

Would it make sense to give a hint to the user that the API is disabled? (i.e. the password field is readonly/visible but disabled + text message). A link to known apps list is not given. (When I read the Mastodon posts that ask for recommended apps I know that they do not know the provided apps list)

The user query does it other way around: The options for sharing are enabled - independent of an enabled/disabled API. Would it make sense to have the options there readonly/visible but disabled + text message?