Client API host. Endpoints are authenticated; there is nothing to see here.