start documenting credentials API