Your Tinfoil Security WebApp Scanner API credentials can be found in your Add-ons page. The access key should be configured as the username, and the secret key should be configured as the password.