WebAssist never requests API credentials. However, Payment Buttons for PayPal uses them within Dreamweaver or Expression Web to retrieve your PayPal buttons. The credentials are then encrypted and stored on your local machine, and are never transmitted over the internet.
There is no reason for anyone to be concerned. There is no way that WebAssist or any third party would be able to obtain your API credentials by you using this tool.