fixed and secured api