I face the same problem quite often. I think that's the reason why some business APIs provide a client library to use the API. Then it's easier to add some che

I face the same problem quite often. I think that's the reason why some business APIs provide a client library to use the API. Then it's easier to add some checks to avoid misuse of the API.