If an organisation later needs machine access, that will be a separately documented, authenticated interface. Today: do not scrape private reports; do not treat /api/poe as a customer API.

Interest in an API is a signal we may record. It is not traction. Observed API customers: none.