protect api