protect API with APIClient tokens
delete pending specs