why are you calling the api from a backend workflow? Just call it from a front end workflow.

Front end workflows by default make api calls from the backend. The keys are secure and are only on the backend as long as you put them into the designated key fields.