API calls and security

API calls and security

Hi All,
This is really just a call for general advice about security
I make API calls to grab info from an external resource into Creator for say 6 companies

Each of these API calls requires a username, password and token, and they are all different.

Would you set up each request as a standalone function?
Would you store the credentials elsewhere, make them variables and call them that way?

Any other ideas?