Fix: allow external access to APIs