For /api/devices, if you specify the applicationID, it will work. Seems like that’s supposed to be an optional field, so that might still be a bug, but in the meantime you can still work around it. I do this by getting a list of all applications, getting their ID numbers, then calling /api/devices on each ID separately. It’s janky, but it works.