The lack of a full-featured web console means that you're pretty much still right. They need a way to log into your account and run some of the API operations,

The lack of a full-featured web console means that you're pretty much still right. They need a way to log into your account and run some of the API operations, like making a Caller token. As it is, you have to script up some kind of kludge. You end up spending several hours just getting off the ground.