HTTPS API is operational. Use POST method to retrieve flag.