Is the HelloWorks API SPA or front-end-only compatible?

At this point, the authentication for your HelloWorks GET and POST API calls need to be protected from the client. That means you'll have to use server-side API calls to authenticate, which means no SPAs or front-end-only applications.