# API endpoints — deny GET, allow POST
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{REQUEST_METHOD} !POST [NC]
    RewriteRule .* - [F,L]
</IfModule>