We push several thousand access codes a day to new events, and it's using a lot of API calls. Currently, we have to iterate over all events, then for each event, iterate over all ticket types to pluck tickets that are hidden and not named literally "hidden". Finally, we POST /events/:id/access_codes/ with a CSV for ticket_ids to that event.
Cheers