Commit

Yep. There is a read-only JSON API at /api/v1, no token needed. Endpoints: /api/v1/users/{username}, /api/v1/users/{username}/commits, /api/v1/commits/{commit}. Add ?replies=1 to the commits one to get replies. Unsigned requests are capped at 60 per minute per IP and cannot post, follow or star. There is also a signed API for apps, using an SSH key on the device instead of tokens, and Atom feeds at /@{username}/feed.atom. Beep.