MyExeter Platform API
api.exeter.ac.uk is an institution-operated AWS API Gateway deployment in eu-west-2 that serves the MyExeter student app (the Flutter PWA at m.exeter.ac.uk and the iOS and Android builds). Routes evidenced from the shipped application bundle and confirmed live by status code include /content/posts/news, /content/posts/events, /content/posts/banners, /content/spacedata/all, /spaces/get-occupancy-data, /events, /events/external, /location/check-ins, /user/profile, /account, /user-settings and /notification/myexeter/{device,preferences} - each returns 401 {"message":"Unauthorized"} while unrouted paths return the gateway's 403 "Missing Authentication Token", so the routes exist and are token-gated. /application-settings returns a structured 400 requiring a tenant header. Authentication is OAuth2 against an Exeter-owned AWS Cognito user pool at exeter-auth-prod.auth.eu-west-2.amazoncognito.com. The app manifest describes this as "the University of Exeter's public API", but no contract, documentation, registration path or self-service credential is published and no OpenAPI was found; nothing here is callable by a third party.