Verifying Who Is Calling Your LLM API