Overview
Newsletters
Section titled “Newsletters”The lists a site offers and where one person stands on them. One mount pair takes four credentials: a site-pinned API key, an EdgeKit session, a verified upstream credential, or none. It is the one route group that reads the credential off the request rather than off the mount. /edgekit/v1/newsletters/* is the first-party alias and accepts the same four. The emailed confirm and unsubscribe links have no alias: they are served on the tenant host only. userId is accepted only with an API key and is a 400 otherwise, never ignored. A list nobody may see and a list that does not exist are the same 404, never a 403.