crawl-permission-recorder API

GET  /health
GET  /permission?domain=nytimes.com&agent=GPTBot&as_of=2026-07-10
GET  /permission/certificate?domain=nytimes.com&agent=GPTBot&as_of=2026-07-10   [API key]
GET  /changes?domain=nytimes.com&since=2026-07-01
GET  /subscriptions                                                             [API key]
POST /subscriptions  {"endpoint":"https://...","domains":"nytimes.com"}         [API key]

Auth: Authorization: Bearer <key>  (or ?key=<key>)
Free tier: current/recent lookups are open (rate-limited by IP); as-of lookups
older than the free window, the certificate, and subscriptions require a key.