served by the hosted API