There should be some kind of authentication, otherwise the endpoint would be prone to spam requests once made live on `api.getalby.com`