Allocates resource indexes to requestors. Authentication is handled via token in URL (this is not intended to cross untrusted networks), per resource.