diff --git a/api/.gitignore b/api/.gitignore
new file mode 100644
index 0000000..2eea525
--- /dev/null
+++ b/api/.gitignore
@@ -0,0 +1 @@
+.env
\ No newline at end of file
diff --git a/api/server.js b/api/server.js
index f805bae..6df6368 100644
--- a/api/server.js
+++ b/api/server.js
@@ -7,11 +7,11 @@ app.use(cors());
 app.use(express.json());
 
 const fetchToken = async () => {
-  const clientID = "TylerPul-ebayimpo-PRD-a983027cf-9b6b8bba"; // Replace with your eBay App ID (Client ID)
-  const clientSecret = "PRD-983027cfae51-634b-42bb-ae58-d68c"; // Replace with your eBay Cert ID (Client Secret)
-  const credentials = Buffer.from(`${clientID}:${clientSecret}`).toString(
-    "base64"
-  );
+  const ebayClientId = process.env.EBAY_CLIENT_ID; // Replace with your eBay App ID (Client ID)
+  const ebayClientSecret = process.env.EBAY_CLIENT_SECRET; // Replace with your eBay Cert ID (Client Secret)
+  const credentials = Buffer.from(
+    `${ebayClientId}:${ebayClientSecret}`
+  ).toString("base64");
 
   try {
     const response = await fetch(