get API credentials from environment