This is a public endpoint. No authentication need.