Popular posts

I noticed that the free plan doesn't require an API key, that could be something that you may consider adding. In Cloudflare you could probably add a WAF rule for header, query string, or cookie values and if not set have CF reject the all.