fix api bombs