An almost certainly illegal but effective way to stop thus site is to query the API in such a way that the key or account would be suspended.

If they change the tokens, rinse and repeat until you can't find them anymore.

This is illegal don't do this.