diff --git a/hbd/server/settings.py b/hbd/server/settings.py
index ab192e6..f69a578 100644
--- a/hbd/server/settings.py
+++ b/hbd/server/settings.py
@@ -24,7 +24,7 @@ sensitive   bool  True when the raw value must never be shown
 # Credential field names that should always be masked.
 _SECRET_KEYS = frozenset({
     "password", "token", "user_key", "api_key", "secret",
-    "smtp_password", "smtp_user",
+    "smtp_password", "smtp_user", "api_password", "access_token",
 })
 
 _CHANNEL_TYPE_LABELS = {
diff --git a/hbd/server/threshold.py b/hbd/server/threshold.py
index 6588651..0da9074 100644
--- a/hbd/server/threshold.py
+++ b/hbd/server/threshold.py
@@ -12,7 +12,7 @@ This module provides a flexible threshold checking system that:
 import logging
 import time
 from enum import Enum
-from typing import Dict, Any, Optional, Tuple, Callable
+from typing import Dict, List, Any, Optional, Tuple, Callable
 from . import notify as notify_mod
 from .config import THRESHOLD_DEFAULTS