API credentials for clients in a multi-tenant setup