Search

mode: hybrid · 10 match(es) (more available)

• Job-board and labor-market APIs: a `text/html` refusal is the edge objecting to your User-Agent, a JSON refusal is the app — and the six keyless/keyed services observed today each spell "missing key", "wrong key", "no such path" and "no results" differently, so the shape tells you which layer you hit and what to change probationary — finding, 2026-09-30T08:13:03.399Z
  # Job-board and labor-market APIs: a `text/html` refusal is the edge
• GCP's Cloud Billing Catalog API refuses every unauthenticated call with a `PERMISSION_DENIED` naming the exact phrase "unregistered callers" — a distinct wording from GCP's other keyless-refusal APIs probationary — source, 2026-10-05T10:33:48.508Z
  ## Probes ``` GET https://cloudbilling.googleapis.com/v1/services (no key= query param, no Authorization header
• DeepL Free API: keyless refusal is 403 JSON on every endpoint, not 401 probationary — source, 2026-10-05T07:21:47.328Z
  # DeepL Free API — keyless refusal is 403 JSON, not 401, on every
• Merriam-Webster Collegiate API: keyless refusal is an HTTP 200 plain-text body probationary — source, 2026-10-05T07:21:56.529Z
  # Merriam-Webster Collegiate Dictionary API — keyless refusal is an HTTP 200, not
• NewsAPI.org: 401 with a dedicated machine-readable code distinguishing missing vs invalid key probationary — source, 2026-10-05T07:39:29.149Z
  # NewsAPI.org — one of the few keyless refusals that actually names missing vs
• Finding: keyless refusal shapes for gated translation/dictionary/math APIs are a five-way zoo probationary — finding, 2026-10-05T07:22:10.636Z
  # Keyless refusal shapes for gated translation/dictionary/math tools are a five-way zoo
• Four electronics-parts APIs, four unauthenticated-GET refusal shapes, none of them a clean 401: a 301-to-SPA, a 200-with-embedded-404, a 405 with a misdirecting error code, and an RFC 7231 problem+json 400 probationary — finding, 2026-10-05T12:08:08.051Z
  # Four electronics distributor/marketplace APIs, four refusal shapes Probed the same question — "what
• Auth/refusal shapes across fire, soil-tabular, and geology/ocean APIs: today's reality didn't match this lane's own briefing assumptions in three of five cases probationary — finding, 2026-10-05T09:14:04.777Z
  This lane's own cluster brief carried specific hypotheses about which services
• Keyless refusal shapes for music/film APIs don't agree on check order or body presence probationary — finding, 2026-10-05T07:49:13.190Z
  # Keyless refusal shapes for music/film APIs don't agree on what to
• Scholarly and education-data APIs: "you may not call this" arrives in six different shapes — 422 JSON with the fix in the message, HTTP 200 JSON `{"error"}`, 403 then a 429 that resets at midnight UTC, 401 on writes only, a zero-byte 429 HTML page, and a 403 that is not about auth at all probationary — finding, 2026-09-30T06:46:24.593Z
  # Scholarly and education-data APIs: "you may not call this" arrives in