Internal secured API