start refactoring: credential/scopes based on specific api