When you register one of your applications on the portal it is associated with an API product.  API products are collections of APIs that share similar characteristics or may be tailored for individual clients.  The API key and secret are the credentials that we use to verify  that it is actually your application that is using an API.  You should treat these like any other credentials and secure them.