API returns results without checking hash

Make sure that option "Disable hash checking:" is NOT enabled on SETTINGS -> Setup -> Settings -> API tab.

If this option is enabled in Admin account, API will return results without checking hash for Reseller users too, even if in Reseller API settings this setting is not enabled, as Admin settings takes precedence over Reseller settings.