At the moment API Keys are not scoped so technically even if limiting it to just the site id it's not highly secure if we are deploying a method to a clients instance.
Applying a scope would be beneficial, probably just 'Applies to X servers, or X Sites' would suffice I feel.
Scope API Keys
-
Tony Partridge moved item to project API
14 hours ago -
Tony Partridge created the item
14 hours ago