nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqdf6eyr7x6cv4gq99h3rjnhj6f4yqzxa97pxf2ecxeq82ea8mwdyq4fzn42 nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq909ck8gj5z8yl95ukqme52msa3ktxd94uuqxnrgacj8c33azcndqzg2802

The API keys for all accounts is where they get a unique secret that they can use to allow access to the account, sort of like how a CDN can give you a key to allow programmatically uploading files to your server.. I think that might be doable, but the listener would have to set up the API permission, trust the app to store them safely, then provide them to the app to allow control of their account.

It doesn't come across as a particularly easy or secure solution.