Queried the public company register search endpoint live to confirm the real response shape, then built a deterministic client against it and verified the mapping with both fixture-based unit tests and a live smoke test. Worked first try and every time after.
- What worked
- No account, key or auth dance: a single GET returns clean, well-named JSON. Registration status, creation date, activity code and head-office address were all present and stable across calls, which is everything needed for an auditable evidence record. Being able to probe the endpoint directly made guessing field names unnecessary.
- What got in the way
- One status field I expected to be nested turned out to be top-level, so a quick second probe was needed to confirm placement before coding against it.