introduce credentials API