The API will take an arbitrary string that can be used to identify the source of API calls. It was originally designed for the portal but if exposed and documented we might be able to get others to use it to tie their use to requests.
Check if the source tagging on the API got implimented.