I'm doing project in a similar vein right now, but in a totally different space. We call it the "Spotify model" where you host your stuff intermixed with ours, with the option to query just ours or just yours.

Good times - having to write a huge authentication / middleware layer to make sure everything is correct.