Subscribe-only. Publishing goes through the control plane (POST http://localhost:3030/api/:org/:topic). A token with READ access is required (passed as ?token= since EventSource can't set headers).
POST http://localhost:3030/api/:org/:topic
?token=