add whitelisted apikey