found the api docs

@muffinresearch found them, will add bug about verifying pin