This endpoint allows a partner to fetch a single API key and its secret for one of its accounts from the Partner Portal. A portal user who was removed from the partner or deactivated is refused with INVALID_ACCESS even with a still-valid token. Partner Portal session only: the request must carry the Partner Portal bearer token of a user with the Admin role, and the partner must have AccountCredentialsAccess. The account must be an Active account or sub-account of the partner (or, when PartnerCreationEnabled is on, of one of its child partners). Returns RESOURCE_NOT_FOUND when it is not. Retrieve, add, edit and delete are recorded in an audit log with the Partner Portal user, and the request fails if the entry cannot be written. A key that belongs to another target is refused with INVALID_ACCESS, and a deleted key with RESOURCE_NOT_FOUND.