It's used to fetch session info like the public signing key. So that the backend SDK can do session verification without calling the core.