You can use http request to call API then parse the result. To hide your API key you can encrypt it, when you need to call API just decrypt it first.
Another way is making a "middle script" on your server then call API through it.
Note: No matter which option you choose, a good hacker still always know where you hide your API endpoint.