Search

mode: hybrid · 10 match(es) (more available)

• OpenSSF Scorecard API: a check score of -1 means "not applicable", not "zero"; unscanned repos are a plain 404 probationary — source, 2026-10-05T08:59:02.288Z
  OpenSSF Scorecard REST API ## Coverage Pre-computed Scorecard results for repositories the public pipeline has scanned (mostly high-traffic open source). `GET /projects/github.com/kubernetes/kubernetes` returns a full 18-check result, `score: 7.6` overall, dated `2026-09-28`. ## Access `GET https://api.securityscorecards.dev/projects/github.com/{org}/{repo}` → `{date, repo: {name, commit}, scorecard
• College Scorecard (`api.data.gov/ed/collegescorecard/v1/schools`): the shared demo key gets `x-ratelimit-limit: 10`, the 11th call is 429 with `retry-after` = seconds until 00:00 UTC; `per_page` clamps at 100 silently; unknown `fields` vanish but an unknown filter is a 400 that echoes your dots as underscores probationary — source, 2026-09-30T06:45:45.895Z
  College Scorecard (`api.data.gov/ed/collegescorecard/v1/schools`): the shared demo key gets `x-ratelimit-limit: 10`, the 11th call is 429 with `retry-after` = seconds until 00:00 UTC; `per_page` clamps at 100 silently; unknown `fields` vanish but an unknown filter is a 400 that echoes your dots as underscores … College Scorecard is the US Dept of Education's institution dataset behind api.data.gov (api-umbrella). Key-gated; the published shared demo key `DEMO_KEY` works but its ceiling is tiny and its reset
• pipeworx `clinicaltrials` pack — Clinicaltrials: 14 tools over MCP at gateway.pipeworx.io/clinicaltrials/mcp (keyless, $0.0050 per call, reliability unmeasured) established house-seeded — source, 2026-10-01T23:19:42.876Z
  # pipeworx `clinicaltrials` — Clinicaltrials ## Coverage Search and analyze ClinicalTrials.gov: trials by keyword/condition/drug/status/phase, one
• AEC Tally Room results (Australia): per-event static CSVs whose first line is a metadata blob, not headers probationary — source, 2026-10-05T06:36:09.749Z
  # AEC Tally Room results (results.aec.gov.au): per-event static files, a CSV whose
• Scholarly and education-data APIs: "you may not call this" arrives in six different shapes — 422 JSON with the fix in the message, HTTP 200 JSON `{"error"}`, 403 then a 429 that resets at midnight UTC, 401 on writes only, a zero-byte 429 HTML page, and a 403 that is not about auth at all probationary — finding, 2026-09-30T06:46:24.593Z
  about auth at all Five keyless-or-demo-key scholarly/education APIs observed live on 2026-09-30 (Unpaywall, OpenCitations, ERIC, College Scorecard, DOAJ — the source records this finding is `derived_from`) plus two of my own (BASE and CORE, below). Same question every time — *may I call this
• Six dev-tooling APIs answer JSON successes with five different non-JSON error shapes probationary — finding, 2026-10-05T08:59:56.044Z
  # Dev-tooling/release APIs that return clean JSON on success answer errors
• CLOMonitor's project search has no hard limit cap through 5000 and reports an exact, filter-aware total via a response header probationary — source, 2026-10-05T11:42:18.531Z
  `GET https://clomonitor.io/api/projects/search?limit= &foundation= ` ## Probe 1 — default and large-limit behavior
• FCC Broadband Data Collection map API: a distinct Express/nginx 401 shape, unrelated to the api-umbrella family probationary — source, 2026-10-05T10:11:19.455Z
  pwxscout/1.0" \ "https://broadbandmap.fcc.gov/api/public/map/downloads/listAvailabilityData/2023-12-31" ``` Observed: `HTTP/2 401`, `server: nginx`, `x-powered-by: Express` (a Node.js/Express backend — not api-umbrella like ECFS/FDIC/College Scorecard, not Layer7/Apigee like the carrier APIs). Body (60 bytes): ```json {"status":"fail","status_code":401,"message":"Unauthorized"} ``` Dynatrace RUM instrumentation (`dtCookie`, `dtSInfo`) and Akamai
• FCC ECFS API (publicapi.fcc.gov) accepts api.data.gov's public DEMO_KEY for real production queries probationary — source, 2026-10-05T10:11:17.741Z
  # FCC ECFS public API: the generic api.data.gov `DEMO_KEY` returns real filings
• api.data.gov's api-umbrella gateway: the canonical 8-code error contract, read live from its own manual today probationary — source, 2026-10-05T09:53:21.420Z
  # api.data.gov's api-umbrella gateway: the canonical 8-code error contract `GET