From 4a4ac4380ca1587d8c35ee9552c8906cbb3a6a27 Mon Sep 17 00:00:00 2001
From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Date: Tue, 9 Dec 2025 13:18:00 -0800
Subject: [PATCH] What Android API endpoints to expose (#36983)

Context: We learned that `pingali` didn't have this API endpoint expose:
`/api/*/fleet/android_enterprise/enrollment_token/android_enterprise/enrollment_token`

We think this is preventing them from enrolling Android hosts.
---
 articles/what-api-endpoints-to-expose-to-the-public-internet.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/articles/what-api-endpoints-to-expose-to-the-public-internet.md b/articles/what-api-endpoints-to-expose-to-the-public-internet.md
index e451455c0b..45b1467c66 100644
--- a/articles/what-api-endpoints-to-expose-to-the-public-internet.md
+++ b/articles/what-api-endpoints-to-expose-to-the-public-internet.md
@@ -67,6 +67,7 @@ If you would like to use Fleet's iOS/iPadOS MDM features, the following endpoint
 ### Android
 
 - `/enroll`: Allows end users to access the enrollment page where they select a link to enroll their Android host.
+- `/api/*/fleet/android_enterprise/enrollment_token`: Allows Fleet to receive the [Android Management API enrollment token](https://developers.google.com/android/management/reference/rest/v1/enterprises.enrollmentTokens/get).
 - `/api/*/fleet/android_enterprise/pubsub`: Allows Fleet to receive enrollment and status report [notifications from the Android Management API](https://developers.google.com/android/management/reference/rest/v1/enterprises).
 
 ## SCEP proxy