I've seen a number of products like this and I'm somewhat curious: how do you handle the security side of things? Do you have a server to shield the API keys and proxy all requests?