Paste the invite token and enter the decryption key separately.

The claim API will receive only the token. The key stays in the browser and is never sent to the server.