add API to get security code status