@mattdm An update on this. I’m preparing changes that will allow you to generate an API key with scopes specific to the feature-set of the WP Discourse plugin you’re using.
This will require changes to core Discourse, so it is subject to approval. Will keep you up to date this week as I make a PR.