Your API has no docs. In 48 hours, it does.

openapi: 3.1.0
info:
  title: Orders API (internal)
  version: 2.0.0
  x-generated-by: contour
servers:
  - url: https://staging.example.com
paths:
  /v2/orders:
    post:
      operationId: createOrder
      summary: Creates an order
      security: [{ bearerAuth: [] }]
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/OrderCreate"
      responses:
        "201": { $ref: "#/components/responses/Order" }
        "422": { $ref: "#/components/responses/Invalid" }
      x-confidence: 0.96  # 14 calls observed
  # … 23 more operations

// Generated by Contour: native fetch, zero dependencies
export interface OrderCreate {
  customer_id: string;
  items: LineItem[];
  coupon?: string | null;
}

export class OrdersApi {
  constructor(private base: string, private token: string) {}

  /** POST /v2/orders: creates an order */
  async createOrder(body: OrderCreate): Promise<Order> {
    const res = await fetch(`${this.base}/v2/orders`, {
      method: "POST",
      headers: {
        Authorization: `Bearer ${this.token}`,
        "Content-Type": "application/json",
      },
      body: JSON.stringify(body),
    });
    if (!res.ok) throw new ApiError(res.status, await res.json());
    return res.json();
  }

  // … 23 more typed methods
}

# Generated by Contour: standard library only, Python 3.11+
import json
import urllib.request
from typing import NotRequired, Optional, TypedDict


class OrderCreate(TypedDict):
    customer_id: str
    items: list["LineItem"]
    coupon: NotRequired[Optional[str]]


class OrdersApi:
    def __init__(self, base: str, token: str) -> None:
        self.base, self.token = base, token

    def create_order(self, body: OrderCreate) -> "Order":
        req = urllib.request.Request(
            f"{self.base}/v2/orders",
            data=json.dumps(body).encode(),
            method="POST",
            headers={"Authorization": f"Bearer {self.token}",
                     "Content-Type": "application/json"},
        )
        with urllib.request.urlopen(req) as res:
            return json.load(res)

    # … 23 more typed methods

# Contour report: Orders API

Sessions: 3   Calls analyzed: 412   Operations: 24

## Confidence per operation
| Operation              | Seen | Confidence     |
|------------------------|------|----------------|
| GET   /v2/orders/{id}  | 31×  | 0.98           |
| POST  /v2/orders       | 14×  | 0.96           |
| PATCH /v2/orders/{id}  |  2×  | 0.61 to review |

## To complete
- PATCH /v2/orders/{id}: only 2 calls,
  `status` values may be incomplete.
- /v1/legacy/*: no calls in the session.
  A 10-minute session on the Export screen will do.

## Masked before analysis
- 3 Authorization headers, 1 session cookie
- 27 personal values (emails, phone numbers)