how to hack api