API lockdown