Energy API security