Yes user api keys exists and are consumed by the mobile app, look at the source code of the mobile app for exact specifications for now.
I would love to have this better documented so if you want to take that project on 
4 Mi Piace