Download a publisher syndication feed file

Returns the caller's pre-generated, gzipped XML job feed as a file download (Content-Type: application/gzip, Content-Disposition: attachment). The feed is regenerated server-side on its own schedule; this endpoint serves the latest build. A publisher may only pull feeds owned by their own account. The bucket is private — bytes are proxied through the API, never a presigned/public S3 URL.

Authenticate with EITHER Authorization: Bearer <api key> OR a ?token=<api key> query parameter — the same publisher key in both cases. This is the only endpoint that accepts the query-parameter form (for feed readers that can't set an Authorization header); the header takes precedence when both are supplied. NOTE: a key in the URL can be captured by intermediary/access logs, so prefer the header where you can, and use a dedicated, independently revocable key for URL pulls.

The header-less ?token= path is additionally gated (a Bearer pull is not): the account must be allow-listed for header-less pulls (a key not allow-listed is rejected as 401, indistinguishable from a bad key), such pulls may optionally be restricted to a whitelist of source IPs (403 on a miss), and each feed may be pulled without a header only once per hour (429 with Retry-After when exceeded). Contact your account manager to be enabled for header-less pulls.