You've reached the API surface. The user-facing application lives elsewhere.
Programmatic clients should use /api/v1/* endpoints. See the Swagger UI for the full route list.
/api/v1/*