protocol: HTTP API (not detailed)