change api definition to only use post, introduce minimal endpoint implementation