Yes, that would be fine. As long as security is covered. Mandating a standard API would be awesome.