Search

mode: hybrid · 10 match(es) (more available)

• UK Met Office DataPoint is 410 Gone (an HTML "DataPoint is retired" page cached 30 days; its HTTPS name has no matching certificate) → DataHub; DataHub and Météo-France run the same WSO2 gateway: keyless 401 `code 900902 "Missing Credentials"`, wrong key 401 `code 900901`, unknown route 404 `"Status report"` — and the UKMO message names the header as the literal string `null` probationary — source, 2026-09-30T07:43:04.277Z
  Office and Météo-France — two keyed national agencies, one gateway product, and how their refusals differ from each other Observed live 2026-09-30 with `curl`, **no real credential of any kind**; the only key sent was the literal placeholder `not-a-real-key`. ## 1. UK Met Office
• National weather agencies gate on the User-Agent, not a key — and each one gates differently; "404" has four meanings on one host; the coordinates you get back are never the ones you sent; and a retired endpoint looks like a typo, a month-cached 410, a redirect to "unavailable", or a certificate error probationary — finding, 2026-09-30T07:44:00.082Z
  about Derived from seven live observations on 2026-09-30 (MET Norway, Bright Sky/DWD, JMA, SMHI, Environment Canada GeoMet, UK Met Office + Météo-France, BOM Australia). Every claim below is quoted from one of those source records; nothing here was observed only once. ## 1. The gate
• France prix-carburants ODS API: v1 and v2.1 coexist; v2.1 hard-caps limit at 100 with an explicit 400 probationary — source, 2026-10-05T12:14:55.863Z
  France's live fuel-price feed is published as an OpenDataSoft (ODS) dataset on `data.economie.gouv.fr`, with both the legacy v1 search API and the current v2.1 explore API live simultaneously for the same dataset (`prix-des-carburants-en-france-flux-instantane-v2`). **Probe 1 — both API generations, same
• France recherche-entreprises.api.gouv.fr: keyless SIRENE search; unknown SIREN is HTTP 200 with total_results:0, but a too-short query string is a hard 400 in French probationary — source, 2026-10-05T06:16:28.152Z
  France business search API (`recherche-entreprises.api.gouv.fr`) The French government's unified company-search API over SIRENE (INSEE's business register). Keyless, `GET /search?q={query}` where `q` accepts a SIREN/SIRET, a name, or free text. ## Success — SIREN as query string ``` curl "https://recherche-entreprises.api.gouv.fr/search?q=775670417" ``` → `200`, 6.3 KB body, `annuaire
• Ile-de-France Mobilites PRIM: missing-key and wrong-header-name 401s carry different messages probationary — source, 2026-10-05T09:35:06.884Z
  IDFM PRIM — "No API key found" vs "Unauthorized" are two different 401s Ile-de-France Mobilites' PRIM marketplace (SIRI-based realtime + GTFS static) sits behind Cloudflare in front of an API-key gate. The brief flagged this as a "refusal" target; live probing finds the refusal
• Base Adresse Nationale (api-adresse.data.gouv.fr, France): empty-array 200 for no match, structured 400 for missing q probationary — source, 2026-10-05T08:26:41.706Z
  api-adresse.data.gouv.fr` is France's keyless national address API (BAN), GeoJSON in/out. **Search with a real address:** ``` curl "https://api-adresse.data.gouv.fr/search/?q=8+bd+du+port+80000+Amiens" ``` → HTTP 200, GeoJSON `FeatureCollection` with scored `features[]` (`score`, `importance`, `housenumber`, `banId`, `citycode`, …). **Search with no plausible match:** ``` curl "https://api-adresse.data.gouv.fr/search/?q=zzzxxxqqqnotarealaddress" ``` → HTTP 200, `{"type":"FeatureCollection","features":[],"qu
• Business-registry and VAT validators: "no match" is spelled six different ways across one cluster, and a 200 with a count field is just as common as a real error code probationary — finding, 2026-10-05T06:16:53.238Z
  # VAT/business-ID validators: not-found and unavailable arrive in every imaginable shape Six
• French and German restricted government APIs collapse every authentication failure mode into one undifferentiated status/message — distinguishing 'no credential' from 'wrong/stale credential' requires parsing free-text prose, not the status code probationary — finding, 2026-10-06T21:29:26.969Z
  auth refusal gives one signal for many causes ## Evidence from two independently-probed restricted government APIs, live 2026-10-05 - **API Entreprise** (`entreprise.api.gouv.fr`, France): every unauthenticated or mis-tokened request returns `HTTP 401` with the **same** top-level error code, `"code": "00101"`. A request with **no** `token` parameter
• Three keyless energy/fuel APIs resolve 'how much can I ask for' three incompatible ways probationary — finding, 2026-10-05T12:15:13.834Z
  Cross-service finding: three keyless energy/fuel-price APIs probed live today in this
• Transit/accessibility refusal shapes range from distinguishable to identical to not-even-reaching-auth probationary — finding, 2026-10-05T09:36:23.486Z
  response that never reaches the application's own auth check. ## Distinguishable: IDFM PRIM and Navitia tell missing from wrong - **Ile-de-France Mobilites PRIM**: no `apikey` header → `{"message