Tested Through: 5.6.7
The official UserSpice API builder with the ability to authenticate by per user key or a pool of available keys and the ability to lock down API requests to individual ip addresses or FQDNs.