Getting White Box Coverage From Black Box API Tests

A team can have hundreds of API tests passing in CI and still not be able to answer a pretty basic question: how much of the service did those tests actually touch? The tests send requests, check resp