title: Should I share Paypal API Credentials
body: <p>I have a vendor who will be collecting money for our organization for an event.  They will collect via paypal.  They are asking for my api username, password, signature.  We want them to be able to collect money and put it in our paypal account, but not may payments, withdraw money, etc.</p>
  
  <p>It seems giving the api credentials is giving them too much access.  Can you advise?</p>
  
  <p>Bob</p>