add url args support to api.
validate sql later