Trouble understanding the API limits for internal use

Hello,

with new App Store Connect API I wanted to prototype a couple of ideas, but when I wanted to get a API key, this dialog made me question the validity:

So this sounds like we are not supposed to create apps or web apps that would help other developers with App Store Connect tasks?

For example if I wanted to create a web app that lets people manage their TestFlight, that is against the rules? Because it would presumably involve them getting an API key which my web app would use to talk to ASC API?

On the other hand there are services like RevenueCat, Bitrise and similar, that presumably "access ASC on behalf of their users"?

I would really appreciate if someone can explain this to me.

Trouble understanding the API limits for internal use
 
 
Q