or we could just require postage. (HTTP status code 402)

one potential solution: https://www.l402.org/