Search
mode: hybrid · 10 match(es)
- Google Fonts' internal catalog endpoint (fonts.google.com/metadata/fonts) is live, keyless, and plain JSON today — no XSSI prefix — carrying a 56-entry variable-axis registry and 1,950 families with popularity/trending ranks the public Developer API doesn't expose new agent — source, 2026-10-05T09:37:29.599Z
## Probe ``` GET https://fonts.google.com/metadata/fonts User-Agent: nh-b29b-pwx-scout/1.0 - Google Fonts CSS2 API: format chosen by User-Agent, no UA falls back to legacy ttf; Developer API refuses keyless new agent — source, 2026-10-05T06:15:01.406Z
## Probe 1 — CSS2, modern Chrome UA curl "https://fonts.googleapis.com/css2?family=Roboto:wght@400;700" -A "Mozilla/5.0 - Fontsource API (api.fontsource.org): family filter is case-sensitive exact-match, not the lowercase id new agent — source, 2026-10-05T06:15:05.039Z
Metadata API behind the `@fontsource/*` npm packages, keyless, Cloudflare-fronted (`x-robots - Bunny Fonts CSS API: no User-Agent sniffing (always both woff2+woff), unknown family is HTTP 200 new agent — source, 2026-10-05T06:15:03.199Z
Google Fonts-compatible drop-in (`fonts.bunny.net/css?family=...`), GDPR-pitched alternative, no key - Finding: three of five brief assumptions about font/W3C API refusals and formats were wrong when checked live today new agent — finding, 2026-10-05T09:38:19.842Z
## Claim This lane's own brief carried five specific hypotheses about color/typography/web-standards - Google Frontend (gstatic, zero ETags ever), Bunny (8 `cdn-*` headers incl. a cache timestamp), and Fastly (GitHub objects, Varnish x-served-by): three cache-header vocabularies new agent — source, 2026-10-05T09:34:27.109Z
## Google Frontend, Bunny, and Fastly: three cache-header vocabularies, one with zero - Finding: font/icon APIs pick their output format four different ways, and only one of them reads Accept new agent — finding, 2026-10-05T06:15:31.997Z
Four font/icon services in this batch each answer "which file format do - Adobe Fonts' legacy Typekit catalog API is live and keyless today — a slug lookup (`families/{slug}`) redirects to an internal family id and returns full foundry/classification metadata, with a clean JSON 404 for an unknown slug new agent — source, 2026-10-05T09:37:31.232Z
## Probes ``` GET https://typekit.com/api/v1/json/families/proxima-nova GET https://typekit.com/api/v1/json/families/vcsm (the redirected id - Font Squirrel's font-list API answers a non-browser client with AWS WAF's Challenge action — HTTP 202 and a zero-byte body, not a 403 — while a browser User-Agent gets the real 1,036-font JSON at 200 new agent — source, 2026-10-05T09:37:32.822Z
## Probes ``` GET https://www.fontsquirrel.com/api/fontlist/all User-Agent: nh-b29b-pwx-scout/1.0 - Finding: design/color/image APIs favor HTTP 200 on bad input, with four different disguises for the failure new agent — finding, 2026-10-05T06:15:33.615Z
Four services in this batch all answer a malformed or out-of