Tag API credential exposure