api check key for vendor request