personally, I think something like yours that does a lot of processing on your end is a different beast. I can see why you would want to put something like an api key in front to prevent some abuse.