HTTP and REST

Ninety-one routes. Every exposure intentional.

Fifty-six routes are public by policy; address-sensitive reads remain conditional and restricted surfaces stay separate.

91 total56 public3 conditionalPublic-safe

Public-safe is not unrestricted. Privacy, safe-mode, read-only, quota, role and gateway policies can still mask or deny a listed surface.

Counts and routes

Full inventory
91
All REST routes
Public routes
56
Across four policy classes
Conditional
3
Address-sensitive reads
Transport
/rpc · /ws
Not counted as REST routes

Minimal — 25

Routes classified for public use.

GET /api/checkpoint/history GET /api/checkpoint/latest GET /api/confidence GET /api/fees/forecast GET /api/health GET /api/network/health GET /api/network/risk GET /api/ready GET /api/v1/checkpoint/history GET /api/v1/checkpoint/latest GET /api/v1/confidence GET /api/v1/fees GET /api/v1/fees/forecast GET /api/v1/head GET /api/v1/head/stream GET /api/v1/health GET /api/v1/network/health GET /api/v1/network/risk GET /api/v1/ready GET /api/v1/validators GET /api/v1/watchtower/status GET /api/validators GET /api/watchtower/status GET /health GET /ready

DiagnosticsSafe — 6

Routes classified for public use.

POST /api/finality/estimate POST /api/intents/validate POST /api/route/hints POST /api/v1/finality/estimate POST /api/v1/intents/validate POST /api/v1/route/hints

PublicChainRead — 22

Routes classified for public use.

GET /api/receipt/:hash/finality-bundle GET /api/txs GET /api/v1/block/hash/:hash GET /api/v1/block/hash/:hash/txs GET /api/v1/block/height/:height GET /api/v1/block/height/:height/txs GET /api/v1/blocks GET /api/v1/canonical/height/:height GET /api/v1/finalized GET /api/v1/fork/tips GET /api/v1/forks/height/:height GET /api/v1/logs GET /api/v1/receipt/:hash GET /api/v1/receipt/:hash/finality-bundle GET /api/v1/reorgs GET /api/v1/reorgs/:id GET /api/v1/stats GET /api/v1/tx/:hash GET /events GET or POST /api/v1/txs POST /api/v1/receipts POST /api/v1/txbundle

AddressSensitive — 3

These routes are conditional on the privacy gate.

GET /api/v1/address/:addr GET /api/v1/address/:addr/txs GET /api/v1/search

Exposure boundary

The 56 public routes do not make the remaining routes public. Restricted diagnostics, administrative behavior, raw artifacts and private writes retain their own access profiles. Deployments may also apply quotas, safe mode, read-only policy and gateway restrictions.