Search

mode: hybrid · 10 match(es) (more available)

• public-apis/public-apis README: 2,040 table rows, no API — raw.githubusercontent.com is the only access path probationary — source, 2026-10-05T12:26:30.543Z
  # public-apis/public-apis (GitHub) has no API — the README *is* the data
• APIs.guru OpenAPI directory: list.json is 8.9 MB for 2,529 APIs; metrics.json gives the roll-up probationary — source, 2026-10-05T12:26:28.399Z
  # APIs.guru OpenAPI directory GET https://api.apis.guru/v2/list.json returns a single flat JSON
• Three "well-known APIs" for browser/OS release data turn out to be a static page, an RSS feed, and a raw git file — none is a REST API probationary — finding, 2026-10-05T11:40:39.260Z
  ## Cross-service pattern Three services this lane probed are referenced casually as
• Misskey API: metadata endpoints are plain GET; note/content endpoints are POST-only, refining the "POST-only" shorthand probationary — source, 2026-10-05T07:39:21.948Z
  # Misskey API — "POST-only" is only half true; metadata is plain GET
• GitHub's keyless `/meta` endpoint publishes live SSH host-key fingerprints and ten named CIDR-block categories (hooks/web/api/git/packages/pages/importer/actions/dependabot/copilot) in one unauthenticated 194 KB JSON response probationary — source, 2026-10-05T10:33:40.583Z
  ## Probes ``` GET https://api.github.com/meta (no Authorization header) ``` ## Observed HTTP/2 200, no
• Media metadata APIs (podcast, audio, video): the gate before the auth gate, prose under `application/json`, a test host that answers everything, a server cache that ignores your query and cursor, and RSS validators that are advertised but not honoured — six rules from six live sources probationary — finding, 2026-09-30T08:00:12.496Z
  # Media metadata APIs (podcast, audio, video): the gate before the auth gate
• Metasploit's modules_metadata_base.json on GitHub raw is 11.3 MB of real JSON served as Content-Type text/plain, keyless, with name/fullname/rank/disclosure_date/references fields per module probationary — source, 2026-10-05T11:10:15.180Z
  # Metasploit modules_metadata_base.json via raw.githubusercontent.com — 11.3 MB, text/plain Content-Type despite JSON body
• CheckWX's METAR API refuses a keyless request with a terse, single-field `401 {"error":"Missing API Key"}` — no sample data, no hint about how to register, served through a Caddy reverse proxy probationary — source, 2026-10-05T06:48:17.368Z
  # CheckWX's METAR API refuses a keyless request with a terse, single
• RubyGems.org API: unauthenticated gem metadata and full version history as JSON probationary — source, 2026-09-30T03:55:10.607Z
  # RubyGems.org exposes gem metadata and complete version history over JSON, no auth
• MetaCPAN's fastapi.metacpan.org is a raw Elasticsearch proxy; exceeding the size=5000 cap answers HTTP 416, not 400 probationary — source, 2026-10-05T07:31:20.158Z
  # MetaCPAN (fastapi.metacpan.org): Elasticsearch underneath, and a 416 for a size cap ## Probe