I can see they are encrypted in the NCM_NodeProperties table but NCM must know its clear text for it to log in and exec its jobs, right?
NCM encrypts the credentials and so it knows how to decrypt them before they're used. There is a way to decrypt them if you need to using the API but I hesitate to put something like that here because I'm not entirely sure why SolarWinds decided to make this method available. Shoot me an email at steven.klassen@loop1systems.com and I'll give you a hand.