Readonly web api

Is there a way to make the api readonly? There appears to be only 1 api key which allows read/write. I would like my website to access LimeLM servers to get the license keys for a specific user, e.g., when a user is logged into to their account on my website, but I do not want api to have write functionality from the website code for security reasons.

A separate api key that limits api functionality to readonly may be the easiest if the the above is not immeidatly available. Or, are there alternatives besides writing a separate proxy server (which would also require a separate machine)?

The API key for a LimeLM account is limited to whatever permission a customer has. So, to make an API key read-only, then create a separate LimeLM user for your LimeLM account, set the appropriate permissions, and then use that new user's API key.

Does that make sense?