api: limit public API