checkpoint read-only HTTP endpoints