Looks like your API has a bit of an identity crisis with non-HTTPS hosts and a plethora of missing error responses. Also, seems like inline schemas are having a party without an invitation.
| Severity | Suggestion |
|---|---|
| Severity | Suggestion |
|---|---|
| Severity | Suggestion |
|---|---|
| Severity | Suggestion |
|---|---|