diff --git a/.template.env b/.template.env
index 6ac9a91..357e16e 100644
--- a/.template.env
+++ b/.template.env
@@ -24,3 +24,7 @@ TO_EMAIL="to@example.com" # adresse de destination des emails (To)
 MATOMO_ID_SITE=
 MATOMO_BASE_URL=
 MATOMO_TOKEN=
+
+# API privée
+USERS_DB_PATH=./users.sqlite
+MATOMO_TRACKING_ENABLED=true
diff --git a/pyproject.toml b/pyproject.toml
index a1e0f52..a73e0fe 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -22,6 +22,8 @@ dependencies = [
   "flask-caching",
   "pyarrow>=23.0.1",
   "flask-cors>=6.0.2",
+  "flask-smorest>=0.46.0",
+  "marshmallow>=3.20.0",
 ]
 
 [dependency-groups]
@@ -43,5 +45,7 @@ env = [
   "DEVELOPMENT=true",
   "REBUILD_DUCKDB=true",
   "DATA_SCHEMA_PATH=/home/colin/git/decp-processing/dist/schema.json",
+  "USERS_DB_PATH=tests/users.test.sqlite",
+  "MATOMO_TRACKING_ENABLED=false",
 ]
 addopts = "-p no:warnings"
diff --git a/src/api/__init__.py b/src/api/__init__.py
new file mode 100644
index 0000000..fff577c
--- /dev/null
+++ b/src/api/__init__.py
@@ -0,0 +1 @@
+# decp.info — API privée. init_api(server) sera ajouté Task 6.
diff --git a/tests/api/__init__.py b/tests/api/__init__.py
new file mode 100644
index 0000000..e69de29