(I know this has been requested before, but I couldn't find a canny for it)
Please add an authentication/authorization model such as oauth for use by third-party applications, so that they can integrate with the VRChat API without having to grant full access to the user's account. Even having a read-only authentication model would be very useful.