How are payments created by the API sent? Are they secure?

Your API only initiates payment requests. All payments are held in the customer portal, under the payments section, and must be approved by a user with permissions to approve transactions. The payments will only be sent after being approved by a user.