An API with clear permissions.

Business endpoints use /v1 with separate credentials and scopes per website. Generation remains unavailable until the real provider, pricing and storage integrations are accepted.