We inherited a service with no OpenAPI. Here is how we scanned the real one.

The handoff was familiar. The original team had moved on, the service kept production traffic, and the API documentation was a Postman collection last touched in 2023 plus a Confluence page nobody tru