University of Helsinki API Portal (Gravitee)
The University's own API developer portal and gateway — a self-hosted Gravitee API Management deployment. The portal REST API answers anonymously and is, in practice, the University's API discovery surface: GET /portal/environments/DEFAULT/apis returns all fifteen public APIs with entrypoints and documentation links, and each API's Swagger page serves its OpenAPI in full. The configuration endpoint states the credential header (X-Api-Key) and which plan security types are enabled (apikey, oauth2, jwt) and disabled (keyless, sharedApiKey). No /.well-known/api-catalog and no apis.json exist; this endpoint is the catalogue. The base itself (/portal/environments/DEFAULT) returns 500 — there is no root resource; the collections beneath it (/apis, /pages, /configuration, /theme) all return 200 anonymously.