Understanding the Merchant Portal: API keys