The media timeline endpoint is not public, or at least not documented by Twitter, but seems they don’t have any problems if it’s used as there are clients out there using it.
Anyway, I am not sure if I am allowed to share information about it…
/cc @andypiper