Securing the proxy API for Fir... Note