API auth tokens are per user per app.

I have not seen anything in the terms that would put us of of compliance.