I like this idea! But why not just request a valid ecash token as a part of the header? The first couple steps seem superfluous to me.

EDIT: Perhaps it lets you have a sort of authentication step. Instead of providing an API auth token, you have to successfully pay a LN invoice instead.