Answer
A general-purpose REST client (like Postman) pointed at a discovered endpoint, using the same token flow your real client will use, catches contract misunderstandings far earlier than debugging them inside application code. See discover an API contract for what to record while you're there.