Get an SDK’s npm package document
npm’s package document for @fetchski/attract-cms-sdk, the name sent encoded (@fetchski%2fattract-cms-sdk, as npm sends it; pnpm’s %2F too). The registry is /api/v1/sdk/npm/. It lists the version the site serves: its own release’s. After the site upgrades, update the package (npm update) to install the new one.
Access: any API key of this site that is switched on and not past its expiry date, whatever its scopes and signing mode (npm and Composer can’t sign), sent as Authorization: Bearer fsk_… (what npm, pnpm, Bun and Composer’s bearer auth send); ApiKey fsk_… works too. The key’s network allowlist still applies (403). Anything else, the management key and a signed-in session included, gets 401.
Rate limit: each request spends one of the key’s own reads-per-minute (default 600); over it, 429 with Retry-After.
Authorizations
Response
The package document.
npm’s package document: the newest version as dist-tags.latest, and every version the site keeps with its package.json fields and its tarball.