Every real endpoint this server exposes — generated directly from openapi.json
(the machine-readable spec), so this page can never drift from what's actually served. Every
location-aware endpoint accepts the same six query parameters (lat+lon,
zip, city[+state], county[+state],
or state alone) and returns the same envelope shape: { endpoint, status,
generated, mock, location, count, data, note? }. Endpoints tagged
session required need a logged-in admin cookie (see Admin) and
401 without one — checked live against the real server, not assumed.