Read-only reference. Discovery routes (GET /companies) are public; /v1/* requires an API key.