Should this be `access_token` instead of `api_key`?
What about setting environment? or is that inferred from `RACK_ENV`?