server: limit API breakage