Reverse engineering REST API