Comment by tlarkworthy

If you develop a API that requires a key, is there any secure way of allowing third party developers to develop client applications that use your API?

It seems like a malicious party could just view the source of the client app and see the key and hijack it.