🔒 API credentials are stored server-side only and are never shown to employees.