# Hosted API reference

A project's reference is made from its latest registry version: every operation, its parameters, request bodies and responses, with Try it to send real requests. It's private until an owner or admin publishes it, and every push after that updates it.

Hosted references and docs load no third-party script or font, and each response sends its own content security policy. Our own pages report errors to Sentry, with identifiers removed first.

## Who sees it

- Members see the reference in the workspace, published or not.
- Once published, anyone with the link reads it at `https://latitude10.tech/r/<workspace>/<project>`.
- An unpublished project answers the same `404` as one that doesn't exist, so a private project's name never shows.

## In this section

- [Publishing](publishing): publish, unpublish, downloads, search engines and older versions.
- [Embedding](embed): the reference inside your own site.
- [Markdown in descriptions](markdown): what your document's descriptions may use.
- [Caching and security](caching-and-security): the cache, the render cap and the headers.

## Where this comes from

- `app/reference/_lib/access.ts`
- `app/reference/_lib/page.ts`
- `app/r/_lib/respond.ts`
- `app/r/[ws]/[project]/route.ts`