API update (link + security)