Published or draft
published answers what visitors see. draft answers the latest edits, published or not: it needs
a credential that may see drafts, such as an API key with the type’s write scope
(content:<type>:write). The public, and a key with only the read scope, get 403.