How to create a plugin with backend API calls to populate composer while drafting?

Some more puzzle pieces:

API keys can be securely stored under /admin/api/keys.