I'm trying to build a slideshow viewer (mostly for personal use) and the easiest way to do so, by far, is to just make it a static website. Unfortunately, the API cannot be accessed from the browser due to CORS stopping that.

I get that it's mainly to stop API abuse, people spamming it, or bots scraping it for the next big AI grift, but perhaps requests that include an API key should be exempt from that?