Backend HTTP API. All interactions happen over JSON.
Use the API base from your frontend or API client. Unknown paths return JSON errors or 404.