security - Protect API from being shared -
our company provides data through paid api our customers. we issuing them api key allowing ips whitelisted call api. this has been working great far can't think customers end sharing our data other customers without paying it. we've been trying fix issue , think outside box without results. anyone has idea how remedy problem? thank you any appreciated! if mean sharing content have downloaded via api, might out of luck; non-trivially difficult distinguish between legitimate (viewing only) vs. illegitimate (downloading/stealing) api access. once they've downloaded it, there's not can keep them sharing it. watermarks or metadata tagging might find if re-hosted somewhere online, there no way tell if user sharing data offline short of installing spyware on computer. this might problem legal team, rather development team.