API KEY and userId required