A note on public endpoints

these endpoints are also used in our widgets the public endpoints don't require any authentication / api keys, and are well suited for client side use — especially where cors policies are concerned we caution against using our non public (integration api) endpoints on the client side for security purposes (as brella api keys can have both read/ write permissions)