If you are charging someone for access, then presumably you are requiring them to log in to access the data. In that case, it should be pretty straightforward t

If you are charging someone for access, then presumably you are requiring them to log in to access the data. In that case, it should be pretty straightforward to throttle or completely block them if they are doing something (e.g., scraping) that violates your terms of service. Then you charge them again to use your API.