Hi Matthew, I've developed an app that uses OAuth2 to retrieve data via the Canvas API outside of Canvas. A webapp similar to yours i would imagine. If youre testing a tool my best advice would probably be to utilize the benifit of Canvas being an open source tool and run your own instance of Canvas localy, then you could give yourself a developer key from that environment to test with. Theres instructions on doing this on the Canvas LMS github.
Im not sure about the governance at your institution but typically requests for developer keys would go to the IT department, thats how it is managed at my institution.