@Aljoscha

The following are the RPC methods scuttlebot will allow any peer to call. (found by running git grep anonymous in scuttlebot, ssb-blobs, ssb-ebt, and ssb-ooo repos)

• createHistoryStream (legacy feed/message replication, still called remotely by default scuttlebot, and go-sbot)
• gossip.ping
• blobs.has, blobs.changes (legacy blobs replication, not called remotely anymore that i am aware of)
• blobs.get
• blobs.getSlice (not called remotely by any implementation that i am aware of)
• blobs.createWants
• ebt.replicate
• ooo.stream

If a peer is connected via a valid invite code key, scuttlebot allows it to call only these methods:

• invite.use
• getAddress