How is using the API any different to using the website or app? Sounds like you need to move your access controls one layer down, into the API. If the app does rate limiting, the API should too/instead.
Take the github approach and let open source devs write innovative apps based on your open API!
Take the github approach and let open source devs write innovative apps based on your open API!