I think they mean OAuth credentials (all these APIs use OAuth unless you're doing something terribly wrong).

Yep we're using Oauth, so it's easy for a user to disconnect.