Looking for a method to authenticate embedded javascript badges/widgets.

Google Analytics gets around this problem (someone embedding your Analytics code in their site) by allowing you to define URL filters restricting your stat collection to certain URLs.

Google Maps uses a similar idea -- it issues you an API key that is tied to a certain URL "directory". If you want more directories, you need more API keys.

Is there nothing better?