Gandi now recommends Personal Access Tokens instead of API keys.

Currently, the authorization header looks like Authorization: Apikey <password>
With Personal Access Tokens, it should be Authorization: Bearer <password>

I tried making this change in ddclient, and it works, but of course just changing it would break things API key users.

I did not find a timeline for when Gandi will remove API keys.