GET /v1/public/sdk-shield/apps/{app_id}/node-list
The app's signed node list (no authentication)
Description (from the contract)
An unknown, disabled or deleted app, an app without serving nodes, and module.sdkshield not granted or stopped on this controller all answer 404 (never why). Cache-Control: public, max-age=60; rate limited per source IP (429). Tenants may mirror the envelope to any HTTPS address: SDKs verify it themselves.
Parameters
| Name | In | Type | Required | Description |
|---|---|---|---|---|
app_id | path | string | Yes | AppID, 16 lowercase hex |
Responses
| Status | Description |
|---|---|
200 | Signed node list Fields: |
404 | Error |
429 | Error |
What to do on failure
404The resource does not exist or belongs to another tenant.429Rate limited: wait, then retry with lower concurrency.