Since it was a read-only api, I'm assuming they used the readily available json endpoints that require no authentication. reddit blocked it in any of the ways you can block a good faith actor -- by user agent or IP address.