so we will need an endpoint which takes just a URL since we don't want that key on the client side, right?