maybe you don't need the api_key because that information is embedded in the secure line