This is exactly similar to using google APIs as well, just that you are exposing the credentials client side unless you are planning to put the logic on server. With this service you can only allow read APIs and block write APIs, similar to scopes. But you get the APIs within just a few clicks with an API playground and proxy with additional security.