It is a proxy, so if you don't explicitly add keys with a middleware the API will still need the auth. But you can do key mapping: if you pass your key it wil

It is a proxy, so if you don't explicitly add keys with a middleware the API will still need the auth. But you can do key mapping: if you pass your key it will transform it to the real one and if not, then it will just return 403.