Public keys now support identity verification. Create a signing secret in Settings, sign each person or group id on your server with HMAC-SHA256, and send the result as signature. Pulseri then trusts that request. Turn on enforcement once every caller signs, and unsigned requests are refused. Until then they still work, but they cannot set an email or change an existing person's name or group.
See the REST API guide.