Looking at this now I don't think `api_key` should be an arg, we should generate these and provide them back in the response