> The Kicksend web app [...] consumes our API the same way as our other apps do.<p>A result of this is that your app does not work if javascript is disabled. And as a NoScript user, I'll have to carefully consider if I want to whitelist you. (Hint: Quite often, I don't bother. Especially if the site doesn't at least degrade politely ["We're sorry, but our service requires JS..."], which Kicksend does not.)<p>Don't get me wrong -- I think this is a very clean solution. There are just trade-offs to consider. And, to be fair, enabling both client-side and server-side consumption of an external API -- all within the same app -- is probably more of a headache than it is worth.