Is there an OAuth 2.0 authorization server that can authenticate using proof of work? I've never heard of such a thing, but sounds like something worth having for certain use cases. That is, open access API that does not allow spam bots.
Discussion
Alternatively, authenticate based on a Bitcoin Lightning payment for the price to access the API. That would be even better.