My Wordpress website developer is asking for my CC account's API key and code, and I'm not sure if I'm doing this correctly.