API identity verification