Root type
Most API bodies are an object. List exports are sometimes a root array. If orders live under data.list, do not look for them on the root.
Objects vs arrays
Object keys have names. Array slots have indexes. $.user.addresses[1] is not $.user.address. Wrong names make JSONPath return nothing — see JSONPath.
Null vs missing
A missing key is not in the tree. A key with null is there. Front-end empty checks should treat those differently.