shared config validation schema for api requests