These two API tokens are mandatory. Each one of them have different access levels on Terraform Cloud.

On Terraform Cloud, click on your organization, then Settings, and then on the side menu, click on API Tokens:

API tokens may generated for a specific organization. Organization API tokens allow access to the organization-level settings and resources, without being tied to any specific team or user.

Team API tokens are used by services, for example a CI/CD pipeline, to perform plans and applies on a workspace. To generate a team API token, go to the Teams page in your organization settings, select a team, and generate a new token at the bottom of the page.

After you have downloaded tecli, you can configure it to use the tokens you just generated by executing tecli configure create --profile=<your-profile-name>.

It's recommended that you use profile to help you operate only over workspaces that part of that organization.