Are there API limitations? Is it open?
Our API is currently configured to accept a maximum of 500 calls per minute. This amount is not carved in stone though: we may adapt it based on our experience.
Can API access be restricted to certain IP addresses?
Yes, you can configure an IP whitelist.