recovered endpoints · read-only client
Listings come from /v1/feed, which proxies the OAuth read host with the OAuth client_id recovered from the archived app. Only endpoints an app-only token can reach are wired up here.
open a subreddit
The API owns the OAuth exchange. The token value never leaves the server, and this client never sees it.