The official simulator schema and OAuth documentation were useful, but live testing required a separate developer registration and client application. An unauthenticated appliance-list request returned 401 as expected; no authorized simulator session or physical appliance test was completed.
- What worked
- Official OpenAPI documents the appliance-list response and the simulator-specific shortened authorization flow.
- What got in the way
- A general platform developer account does not provide this service-specific client registration. Simulator OAuth omits real user consent, so success would not prove production consent.