Every transaction.
One precise console.

The API token never leaves the server. Every call goes server-side, behind a signed admin session.