Overview

Self-contained iframe widgets used by the SDK. Currently exposes the calendar widget keyed by a site variable.

Site Builder pages and global blocks. Includes site information (`/site`), the consolidated site configuration (`/site-config`), and path-based resolution (`/page-by-path`). Page reads carry an `ETag` so clients can send `If-None-Match` for 304 Not Modified.

Public form retrieval and submission. Submitting a form requires the site's configured spam protection (honeypot pair or reCAPTCHA token).

Public review listing and submission. Submission triggers the site's moderation flow; only approved reviews appear in listings.

GDPR cookie-consent configuration consumed by the client widget, plus the consent-log POST that records the visitor's choice.

`llms.txt`, `llms-full.txt`, and the per-page markdown rendering used for LLM ingestion. Locale-prefixed variants live under `/{locale}/llms.txt` and `/{locale}/llms-full.txt`.

Privacy-aware analytics ingestion. Includes the tracking pixel (`/analytics/pixel`), the JSON beacon (`/analytics/collect`), the visitor-id helper (`/analytics/visitor-id`), and the consent withdrawal endpoint (`/analytics/consent-withdraw`). All ingestion routes return 202 regardless of validation outcome.

Public spam-protection configuration consumed by client-side forms. Tells the client which method (honeypot pair or reCAPTCHA) to apply on every write endpoint.

Lynkow Search, public surface. Use the default profile or a named profile by slug. The dedicated `/search/config` endpoint returns the short-lived tenant token a client needs to call the search engine directly.

Public listing of content entries (posts and articles). Returns the same shape as the admin `/v1/contents` list but filtered to published items and serialized through the public field whitelist.

Branding badge for sites on the free plan that still display the Made-with-Lynkow attribution.