when i hit the api with my account keys and the access is provide by the client