Validate data integrity

Don't you think our `api_key` should be a required field?