All 7 endpoints, with the same headers, JSON shapes and error codes as the real STC sandbox. They point at our built in mock so the demo works without STC credentials.