Requires a Better Auth session cookie or an x-api-key header. The caller's organization role must grant telemetry:read and the organization must be entitled to the {location} in the path (super admins bypass both checks).Latest snapshot with all points for each requested device.