The registry API is a plain local Express server — there’s no authentication, since it’s meant to run on your own machine as a test dependency.
All request and response bodies are JSON. Successful responses return 200 (reads) or 201 (the enroll endpoint, on creation). Errors return 400 for malformed input or 404 when a NIN/BVN lookup finds nothing, always as:

Endpoints

GET /api/nin/{nin}

Look up a person by their 11-digit NIN

GET /api/bvn/{bvn}

Look up a person by their 11-digit BVN

POST /api/enroll

Create a new synthetic person and issue a NIN and/or BVN

GET /api/search

Search enrolled persons by name

GET /api/stats

Aggregate counts used by the dashboard
The pages for each endpoint above are generated automatically from docs/openapi.json — see that file for the full request/response schemas.