add secret to appidentity
finish meta call to topapi