To enable the use of "clients" rather than restricting connection initiation to the web interface, some sort of authorisation API will be necessary.
This could be achieved by system-wide and per-device access tokens, as well as OAuth and HTTP Auth or similar.