Firstly, can I say that I think Morph is a really cool tool. There's one thing I'd appreciate the benefit of someone's wisdom on though.
I'll readily admit to not having a web development background, but having a Google around hasn't suggested any obvious way of navigating this kind of issue.
So I have two questions:
1. Can anyone suggest a good workaround for this?
2. (Morph.io team) Is the reason that you ask us to keep our API key private so that you can ensure that no one user is making too great demands on resources? Are there other reasons why it's important to keep our API key private?