Using the API - Good practices

moocat is mostly right. However, we don’t look at just the client_id, but also take into account what IP the requests are coming from. So if you have an app that has tons of users making client-side requests, you’re still good to go.