A production-track API for a real product — 8 to 15 endpoints across 2 to 4 resource models, built test-first in Laravel or Node.

Included:
— Token authentication with role-based access control
— Request validation, structured error responses, rate limiting
— Automated tests covering each endpoint: happy path and the failures that matter
— README with setup, environment variables, and a route map
— Postman collection, plus OpenAPI docs on request
— A CI workflow file so the tests run on every push
— 10-day delivery, 2 revisions

Test coverage is the part cheap API work skips, and it is the part that decides whether the second developer can safely touch this in a year. I spent a decade as Director of Development at a SaaS company, including a Laravel platform backed by 2,700+ automated tests.

Smaller scope or larger scope both get quoted honestly after a short scoping conversation.