We had our meeting and here’s a summary:
The AJAX API isn’t designed for our intended use. Currently, a single API key interfaces with multiple AJAX hubs and devices, but all traffic and status updates are sent to that single API key. This means every Homey user with the AJAX App installed would receive information about all connected hubs, including those of other users.
We are now exploring the possibility of setting up a microserver within Homey Cloud to receive all data and then distribute it to the correct user.