I have a question about API Credentials. I don't really know exactly how they work but I was wondering if someone has access to the site files are they able to read your API Credentials and if so, can they do anything with them?

The api credentials are incrypted. The only one whom would be able to use them is you. the php will hide the api entry from persons trying to snag any information.

Thanks for the information Rhinox.