I had used them. You only need to create an API key with "deposit" and "getinfo" access rights, therefore there is no chance you're going to lose any funds etc. Just follow their step-by-step guide how to create the key. You are not giving them any credentials this way.

Cancelling is immediate. Then you can (and should) delete the API key you created previously. Easy as a pie.