1) All these actions with pscoe in their module name are not part of vAPI plug-in, I guess you've got them from some other plug-in/package.
2) Yes, by default it uses the credentials you provided in configuration workflows to import vAPI metamodel and register vAPI endpoint. If you want to use a different credentials for a particular vAPI method call, you can override them when you acquire a client from endpoint. That is, instead of
var client = endpoint.client();
you can use the form
var client = endpoint.client(someuser, somepassword);