All I could venture to offer to explain that feedback would be: did you use proper http codes? Post vs get vs put vs delete? Headers? Auth methods? Did you sign

All I could venture to offer to explain that feedback would be: did you use proper http codes? Post vs get vs put vs delete? Headers? Auth methods? Did you sign the requests? Maybe something else I'm forgetting.