Get an access point

One Provider's detail: display name, verified flag, member seats (each with its embedded provider or unverified cert-CN), roster size, and the country + document-scheme composition of its roster. A request for a STALE key (a seat since curated, so its old unverified key left the directory) resolves to the current Provider; the returned key is always the canonical current one. software groups the Provider's sighted hosts by registrable domain with the crawled identity of each, and hostname_count / smp_hostname_count give the true totals behind the capped hostnames / smp_hostnames samples. smp_tenants lists the Access Points (seats) that serve the participants on this Provider's SMP hosts — on a multi-tenant SMP most of the hosted footprint belongs to other APs — with smp_tenant_count / smp_tenant_other / smp_tenant_no_ap so the rows add up to hosted_participant_count (both come from the same rollup run); smp_hosted_by is the reverse: other providers' SMPs that carry this AP's participants. Each sub_providers bucket names its Vendor (name) and links to the Vendor's row (vendor_key).

A Vendor key (v-<slug>) returns the Vendor detail instead and needs a Market-tier key: the Providers it connects through (via), its participants and Companies, the signals that back the row, and the composition of its roster. A Vendor has no Seats, no certificate and no hosts of its own.