Get Signup Availability

Whether public self-serve signup is currently open.

Rate Limited: 30 requests per minute per IP address.

Unauthenticated pre-flight for the signup page, so a closed surface shows its closed screen BEFORE the form can mint a Firebase identity the POST would then refuse. Advisory only: the toggle-gated POST routes remain the authoritative gate, and their 404s already leak enabled.

paid_signup_enabled is a knowing disclosure, not a free one. A closed paid door answers exactly as an open free one does — the intent is withdrawn silently — so this field is the only way an anonymous caller can observe the paid switch, and polling it says when the door opens. It is published because the page has to choose buyer copy before it has an identity to ask with, and what it reveals is a marketing state the pricing page it is linked from announces anyway. It confers nothing: the exemption it names is worth having only to someone who can already reach the free door, which is open to them regardless.