Feature Request

Creating an API Key which can only read data without any rights to make modifications on the backend would give partners a confident way to test their integrations with third party tools.

I believe an API should not have gatekept features. Obviously some of the features of an API serve no purpose at lower subscription levels but preventing the ability to automate across all customers and subscriptions types is silly.

Currently, outbound notifications (ie. webhooks) do not have any security mechanisms. As a security platform, you should support at least basic authentication on these integrations.