scrub api key