API through onion

It seems that all access through the onion domain requires being logged in since some time. This isn’t a problem for manual browsing or whatever, but using the key instead of establishing a session to access the API doesn’t work anymore either. Everything redirects to sign_in page regardless of the key.  
I don’t understand why would you ban unauthenticated read-only access through Tor in the first place, but I suppose that much was intentional. Blocking API surely wasn’t, was it?  
I tried using clearnet domain but it turns out not really to be an option because Clouflare.

@Background Pony #5C6D  
It’s a stopgap; I don’t have the time to do it correctly at this time. We don’t have a framework in place for limiting API requests by e.g. user rather than a web attribute.

Oh ok, thanks. That’s sad, but I can understand that.  
I hope it’s on the should-eventually-be-done list.