Matching order: - Host resolves workspace (platform path `/api/{slug}/...` or verified custom domain) - Method + path pattern (`{id}` params supported) - Only deployed endpoints - Custom-domain-bound APIs only on that domain
Features: responses with `{{variables}}`, scenarios, rules, delays, stateful CRUD, auth types, rate limits, CORS.
Wrong HTTP method returns 405 with `allowed_methods`.