You don’t need to return data from API to generate a 200 response. If you provide expected data and authorization (or set no authorization) a 200 response is always returned