Find the token at track.toggl.com → Profile (at the very bottom). It is stored locally in your browser only.
Without a PAT, the token captured from your open ADO tab is used (refresh the tab when it expires). A PAT with Work Items Read scope makes lookups independent of open tabs.