#third-party api abuse