or
Why I'm probably never making another REST API ever again
https://www.npmjs.com/package/dataloader
It can work, but you’re most likely forcing them to do their own ETL
Probably better off giving them access to DBs (if possible)