The API username and password must be a user's username and password with the role of administrator. This gives you the control of setting what you want the username and password to be. A good practice is to have a dedicated User that is only used for the API calls.
Eric McCarthy
Software Developer
SmarterTools Inc.
www.smartertools.com