From 1fae4202e27a6db2d9201add72b1931380139cb4 Mon Sep 17 00:00:00 2001
From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Date: Wed, 7 Jan 2026 17:15:27 -0500
Subject: [PATCH] Exposed API endpoints for iOS/iPadOS `.ipa` packages and
 Android certificate delivery (#38014)

---
 .../what-api-endpoints-to-expose-to-the-public-internet.md    | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/articles/what-api-endpoints-to-expose-to-the-public-internet.md b/articles/what-api-endpoints-to-expose-to-the-public-internet.md
index 45b1467c66..ce7d776a97 100644
--- a/articles/what-api-endpoints-to-expose-to-the-public-internet.md
+++ b/articles/what-api-endpoints-to-expose-to-the-public-internet.md
@@ -63,12 +63,16 @@ If you would like to use Fleet's iOS/iPadOS MDM features, the following endpoint
 
 - `/enroll`: Allows end users to access the enrollment page on which they download an enrollment profile to enroll their iOS/iPadOS host.
 - `/api/*/fleet/enrollment_profiles/ota`:  Allows hosts to download an enrollment profile.
+- `/api/*/fleet/software/titles/*/in_house_app`: Allows deloying in-house (`.ipa`) apps.
 
 ### Android
 
+If you would like to use Fleet's Android features, the following endpoints need to be exposed:
+
 - `/enroll`: Allows end users to access the enrollment page where they select a link to enroll their Android host.
 - `/api/*/fleet/android_enterprise/enrollment_token`: Allows Fleet to receive the [Android Management API enrollment token](https://developers.google.com/android/management/reference/rest/v1/enterprises.enrollmentTokens/get).
 - `/api/*/fleet/android_enterprise/pubsub`: Allows Fleet to receive enrollment and status report [notifications from the Android Management API](https://developers.google.com/android/management/reference/rest/v1/enterprises).
+- `/api/fleetd/*`: Allows deploying certificates for [connecting end users to Wi-Fi/VPN](https://fleetdm.com/guides/connect-end-user-to-wifi-with-certificate#basic-article).
 
 ## SCEP proxy