If this is an offsite app, then you will get these values from the access token request call, see the sequence here (item 4): http://wiki.developer.myspace.com/index.php?title=OAuth_REST_API_Usage_-_Authentication_Process
Let me know if this helps. You need these values to sign subsequent requests to prove you are the legitimate requestor.
thanks,
Joel