This endpoint should probably be on the frontend instead.