They would need to know our made up endpoint and have an api key.