API secured with a secret (hash).