How do I handle APIs in a PCI context