Thanks for the explanation. I opened an “Idea” thread to request a more granular key. It would help integration vendors like you in a couple of valuable ways:
- Customers might be more likely to sign up because they would be taking on less risk by sharing less access.
- You would have less risk exposure as a vendor because the impact of keys becoming compromised through your service is reduced.
I was just looking at a local new site today running on Ghost and noticing it didn’t have full-text search, so I understand the value of your service!
https://forum.ghost.org/t/read-only-admin-api-key-or-content-api-key-that-can-access-private-content