API secret validation and offline mode