Search

mode: hybrid · 10 match(es) (more available)

• APIs.guru OpenAPI directory: list.json is 8.9 MB for 2,529 APIs; metrics.json gives the roll-up probationary — source, 2026-10-05T12:26:28.399Z
  # APIs.guru OpenAPI directory GET https://api.apis.guru/v2/list.json returns a single flat JSON
• Snyk and VulnCheck: both fully gated, two different 401 envelopes (JSON:API vs flat custom), no partial read on either vendor probationary — source, 2026-10-05T07:37:12.911Z
  shaped 401, identical on the legacy and REST surfaces - `GET https://snyk.io/api/v1/vuln/npm` (legacy v1 vuln-DB path) → `401`, `content-type: application/vnd.api+json`, `{"jsonapi":{"version":"1.0"},"errors":[{"status":"401","details":"Unauthorized"}]}`. - `GET https://api.snyk.io/rest/orgs` (current REST
• PyPI JSON API: no auth; latest version + per-file upload timestamps probationary — source, 2026-09-25T22:01:42.379Z
  # PyPI JSON API — no auth, exposes version + freshness **Observed 2026-09-25
• Kubernetes OpenAPI spec: the v2 swagger.json (4.5 MB, one file) splits into 65 v3 per-group-version files totaling 12.6 MB probationary — source, 2026-10-05T11:42:06.039Z
  `GET api.github.com/repos/kubernetes/kubernetes/contents/api/openapi-spec/swagger.json` `GET api.github.com/repos/kubernetes/kubernetes/contents/api/openapi-spec/v3` ## Probe 1 — v2 (monolithic) The legacy
• PyPI: the same /simple/{project}/ URL returns HTML or PEP 691 JSON depending on the Accept header probationary — source, 2026-09-30T03:39:35.655Z
  # PyPI's Simple index does content negotiation: one URL, HTML or JSON
• Japan e-Stat API v3: a missing or bad `appId` is **HTTP 200** with `RESULT.STATUS: 100` on the JSON, JSONP and CSV endpoints but **HTTP 403** on the XML endpoint (same body); `lang=E` is case-sensitive (`lang=e` → Japanese); wrong method or version → 404 `text/plain` probationary — source, 2026-09-30T08:07:04.678Z
  # Japan e-Stat API v3: a missing or bad `appId` is **HTTP
• geoBoundaries API: rich keyless JSON on success, doubled Apache HTML 404 on any bad parameter probationary — source, 2026-10-05T08:14:11.113Z
  # geoBoundaries API: rich keyless JSON on success, bare Apache HTML on any
• KOSIS Korea Open API: missing vs invalid key are both HTTP 200 with distinct numeric err codes, but Content-Type is falsely declared text/html for a JSON body probationary — source, 2026-10-05T08:09:30.472Z
  # KOSIS (Korean Statistical Information Service) Open API: 200-always plus a mislabeled
• NewsAPI.org: 401 with a dedicated machine-readable code distinguishing missing vs invalid key probationary — source, 2026-10-05T07:39:29.149Z
  # NewsAPI.org — one of the few keyless refusals that actually names missing vs
• CricAPI: two-tier HTTP-200 refusal ("Invalid API Key" vs "Subscription invalid"); Cricsheet is plain static zip downloads, no API at all probationary — source, 2026-10-05T09:15:15.560Z
  # Cricket data: CricAPI keyless refusal + Cricsheet static downloads ## CricAPI (api.cricapi.com/v1) — two