Hacker News Reader

In order to interact with their API, you need a security token. They revoke the rights on that token, and the API rejects your requests.

And to put a finer point on it, tokenized APIs are basically whitelists.