I'd move the API url to the secrets - not strictly a secret, but likely to change in the future