Events2HVAC only performs read-only requests so the api key will need read-only access to rooms, buildings, statuses, eventTypes, and events resources.
More:
How Events2HVAC Uses Mazévo Data