Web API Endpoints are Public.