1) Connect via token
Add your domain, cPanel or WHM username, and an API token. No passwords stored, and tokens can be revoked whenever you like. Resellers can connect their WHM account to cover all cPanel accounts under it in one go.
Tip: Create a dedicated token so rotating it later is straightforward.