b/api: returned data includes TOKBOX_API_KEY