I'm developing a customer dashboard for website insights and need my API key to access certain information. However, the API key currently poses a significant security risk, as it allows full control over servers and applications if compromised. I request the addition of a read-only API key for GET requests, or a method to restrict specific API calls to prevent unauthorized actions like creating or deleting servers and applications.

TL;DR : Give options to restrict API-key