I think it's fine to let this api public, maybe it will be used for other checking.