...
The following metadata and special resources should be available for every application:
GET https://<domain-app>.api.columbia.edu/{v}/console: API console (MuleSoft APIkit).
GET https://<domain-app>.api.columbia.edu/{v}/resourceTypes: An endpoint used to discover the types of resources used by this app.
GET https://<domain-app>.api.columbia.edu/{v}/types: (schemas) Introspect resource and attribute definitions.
...
GET https://<domain-app>.api.columbia.edu/v1/resourceTypes
GET https://<domain-app>.api.columbia.edu/v1/types
SSL Everywhere
Always use SSL, no exceptions. This is enforced at the f5 load balancer (api.columbia.edu) which terminates SSL sessions.
...