Route reference
Internal — endpoints are not documented publicly beyond this summary.
relay-svc
Bidirectional relay endpoint. Requires a signed client token issued out-of-band; unauthenticated requests are dropped at the edge.
config-sync
Serves per-client sync manifests keyed by token in the path. Manifests are opaque binary blobs, not intended for browser access.
console
Management UI, gated on client-certificate auth. See /manage/.