- add_attack api requires token