Require some complex js codes workflow to post using websocket or something and most automated spam goes away. They are mass mindless bot, not targeted spammers.
That's a good idea, but most of the functionality of the site comes from its API. Then again, it's easy to require a key and a captcha to sign up, so your idea is good, thank you.