Which Google API key should be used for MACH Portal configuration

In your Google Console,  choose the server key auto-generated by Google as shown in the screenshot.

Under key restrictions for this Server Key, make sure to set this as None or to "push.themach.com"