Currently at work doing an IT internship at a small company and was asked to make a dashboard that pulled data from two different web services that we use.

My understanding is that I need to use api tokens from these vendors for the dashboard application so that it can update info in real(ish) time without the user manually going to the other website and finding it.

Please tell me wether I have that right or not, if not please explain what I should be doing instead

Currently a senior in college for comp sci but have been taking mostly security classes and no web specific classes. Feeling insane imposter syndrome and could use the advice/info.