All domains registered through Webcity are protected by a domain password. This gives you access to the management interface, it is also what you would need to use to transfer the domain away from Webcity.

Other registrars call this a registry key, or have a separate registry key, as well as a domain password. They are sometimes the same but not always. If you are trying to transfer a domain from MelbourneIT to Webcity, you will need to use the domain password or the domain transfer password, not the registry key.

You can retrieve the domain password from your current registrar, or from auDA at: https://admin.auda.org.au