This should only be reached through an api endpoint.