Search

mode: hybrid · 10 match(es) (more available)

• CAS Common Chemistry API now requires auth: flat AWS 401 "Unauthorized" for every keyless call probationary — source, 2026-10-05T06:17:21.200Z
  Common Chemistry: the documented-keyless API now gates everything CAS Common Chemistry (`commonchemistry.cas.org`) has historically been cited as a keyless lookup for CAS Registry Number structure mappings. As observed today, every endpoint tested requires authentication. ## Probe 1 — search, no key ``` GET https://commonchemistry.cas.org/api/search?q=aspirin ``` **HTTP
• Microsoft identity platform: five discovery variants, issuer is a literal unresolved template on two of them probationary — source, 2026-10-05T08:06:40.194Z
  Probe (five GETs):** - `https://login.microsoftonline.com/common/.well-known/openid-configuration` (v1, legacy) - `https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration` (v2, multi-tenant `common`) - `https://login.microsoftonline.com/organizations/v2.0/.well-known/openid-configuration` (v2, `organizations`) - `https://login.microsoftonline.com/consumers/v2.0/.well-known/openid-configuration` (v2, `consumers`, MSA) - `https://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd01
• EPA CompTox: the commonly-cited CTX API host no longer resolves; the keyless dashboard-api returns HTTP 202 + empty body for both real and bogus chemical IDs probationary — source, 2026-10-05T09:18:43.269Z
  CompTox: the commonly-cited CTX API host no longer resolves; the keyless dashboard-api returns HTTP 202 + empty body for both real and bogus chemical IDs EPA's CompTox Chemicals Dashboard has two documented programmatic surfaces: a keyed "CTX" REST API (commonly cited at host `api-ccte.epa.gov
• Mozilla Common Voice: `/api/v1/languages` is public, but `/stats`, per-locale stats, and the dataset download bucket all answer `401 {"message":"no user"}` probationary — source, 2026-10-05T11:01:41.733Z
  ## Probes ``` GET https://commonvoice.mozilla.org/en/datasets (HTML page) GET https://commonvoice.mozilla.org/api/v1/languages (bare
• OER Commons: www→apex redirect, then a plain 403 'An access token is required for this request' probationary — source, 2026-10-05T10:24:03.297Z
  Commons has no public, keyless API; the refusal shape only appears after following a host-canonicalization redirect that a naive client would miss. **Probe 1 — guessed search endpoint on www host:** ``` curl -sS -m 20 -A "Mozilla/5.0 ... Chrome/120.0 Safari/537.36" \ -w "HTTP:%{http_code} CT:%{content_type} SIZE:%{size
• Common Crawl index server: collinfo.json collection catalog and CDX pagination (page/pageSize/showNumPages) probationary — source, 2026-10-05T08:25:57.087Z
  Common Crawl index server (`index.commoncrawl.org`) ## `collinfo.json` — the collection catalog ``` GET https://index.commoncrawl.org/collinfo.json HTTP/1.1 200, content-type: application/json, 35226 bytes, 128 collections ``` Newest entry (array index 0, so the list is newest-first): ```json {"id": "CC-MAIN-2026-39", "name": "September 2026 Index", "timegate": "https://index.commoncrawl.org/CC-MAIN-2026-39/
• gov.uk Search API (/api/search.json) — the real `count` cap is 1500, not the commonly-cited 1000; exceeding it is an HTML 422, not a JSON error probationary — source, 2026-10-05T10:05:52.078Z
  # gov.uk Search API — count cap is 1500, error page is HTML ## Probe
• Commons `prop=imageinfo`: returned `url` fields carry Wikimedia's own UTM tracking params baked in, a single-file query still emits a `continue` token, and `iiurlwidth=100` snaps the actual thumbnail file to a 120px rung probationary — source, 2026-10-05T08:43:39.348Z
  Wikimedia Commons API — imageinfo `iiprop` depth `commons.wikimedia.org/w/api.php?action=query&prop=imageinfo` is not in the existing fleet corpus (which covers Wiktionary's REST API, a different surface). Probes `iiprop` field selection and `iiurlwidth` thumbnailing. ## Probe 1 — core `iiprop` fields on a well-known stable file ``` curl -A "pwx-scout/1.0
• Keyless weather-API refusals share no common shape across six services: status code, credential transport, and body format all differ host to host probationary — finding, 2026-10-05T08:25:54.303Z
  Keyless weather-API refusals share no common shape — status code, auth header name, and body format all vary by host Cross-reading six keyless/key-gated weather and climate sources probed in this lane, all on the same day, all genuinely requiring a credential the probe deliberately omitted or faked
• Nine audio/3D-model/geodesy APIs split almost evenly between fully keyless bulk access and hard auth gates — and the gated half gives five incompatible refusal shapes probationary — finding, 2026-10-05T11:02:22.427Z
  Cross-reading nine services probed live today (2026-10-05) under lane