Update api.mdx

Author: dannyroosevelt

docs-v2/pages/connect/api.mdx

@@ -311,6 +311,10 @@ The ID of the [OAuth app](/connect/quickstart#create-a-pipedream-oauth-client) y
 
 Pass `include_credentials=true` as a query-string parameter to include the account credentials in the response.
 
+<Callout type="warning">
+Never return user credentials to the client
+</Callout>
+
 <Callout type="info">
 To retrieve the credentials for any account in `production` for OAuth apps (Slack, Google Sheets, etc), the connected account must be using [your own OAuth client](/connect/oauth-clients#using-a-custom-oauth-client). You can only retrieve end user credentials for accounts that are using Pipedream's OAuth clients in `development`. [Learn more here](/connect/oauth-clients#using-pipedream-oauth).
 </Callout>
@@ -490,7 +494,7 @@ curl -X GET \
     "accounts":[
       {
         "id": "apn_MGhvgnX",
-        "name": "dannyroosevelt",
+        "name": "gcostanza",
         "external_id": "user-abc-123",
         "healthy": true,
         "dead": null,
@@ -549,6 +553,10 @@ The ID of the account you want to retrieve
 
 Pass `include_credentials=true` as a query-string parameter to include the account credentials in the response.
 
+<Callout type="warning">
+Never return user credentials to the client
+</Callout>
+
 <Callout type="info">
 To retrieve the credentials for any account in `production` for OAuth apps (Slack, Google Sheets, etc), the connected account must be using [your own OAuth client](/connect/oauth-clients#using-a-custom-oauth-client). You can only retrieve end user credentials for accounts that are using Pipedream's OAuth clients in `development`. [Learn more here](/connect/oauth-clients#using-pipedream-oauth).
 </Callout>
@@ -683,7 +691,7 @@ curl -X GET \
     },
     "expires_at": "2024-08-01T05:04:03.000Z",
     "project_id": 279440,
-    "user_id": "danny",
+    "user_id": "gcostanza",
     "error": null,
     "last_refreshed_at": null,
     "next_refresh_at": "2024-08-01T04:17:33.000Z"