Summary

Looks like your API swagger is throwing some major shade with 2 missing OWASP-defined error responses and a lonely empty server variable. Time to give those responses some love and that variable some purpose!