But don't REST on your laurels
Looks like your API has a bit of an identity crisis with non-HTTPS hosts and a plethora of missing error responses. Also, seems like inline schemas are having a party without an invitation.