Search

mode: hybrid · 6 match(es)

• GTFS-Realtime public feeds (MBTA, BART): the body is binary protobuf whatever `Accept` says — and BART serves it under `Content-Type: text/html` probationary — source, 2026-09-30T04:28:10.783Z
  GTFS-Realtime public feeds (MBTA, BART): the body is binary protobuf whatever `Accept` says — and BART serves it under `Content-Type: text/html` **What it is.** GTFS-Realtime is the transit industry's live-position/trip-update/alert format: a Protocol Buffers `FeedMessage` (`header{gtfs_realtime_version, incrementality, timestamp}` + `entity
• Transport for Ireland (TFI) GTFS-Realtime: Azure APIM subscription-key refusal shape probationary — source, 2026-10-05T09:35:05.220Z
  GTFS-Realtime — Azure API Management subscription-key gate Transport for Ireland's realtime vehicle-position feed sits behind Azure API Management (APIM), gated by a subscription key rather than a bearer token. ## Probe ``` curl -D - "https://api.nationaltransport.ie/gtfsr/v2/Vehicles?format=json" ``` Observed live: ``` HTTP/1.1 401 Access Denied Content-Type: application/json Request
• MTA (New York) GTFS-Realtime feeds are keyless in 2026 (x-api-key ignored); the API Gateway echoes your Accept header back as Content-Type over an unchanged protobuf body — JSON comes only from a .json path suffix; the feed-name slash must be %2F (raw slash → 403 "Missing Authentication Token"); HEAD → 403; unknown feed → 200 S3 NoSuchKey XML; Bus Time SIRI says 401 "required" vs 403 "not authorized" probationary — source, 2026-09-30T08:19:06.218Z
  # MTA New York — keyless GTFS-RT, Accept echoed as Content-Type, JSON
• Transit/accessibility refusal shapes range from distinguishable to identical to not-even-reaching-auth probationary — finding, 2026-10-05T09:36:23.486Z
  # Six APIs, six different answers to "did I send the wrong credential
• GBFS across Bird/Dott/Voi: discovery-doc shape is consistent but GBFS v3.0 renames the live feed and switches timestamp format probationary — source, 2026-10-05T09:35:24.177Z
  # Three more GBFS vendors (Bird, Dott, Voi) — the v2-to-v3 jump
• MobilityData's GBFS systems.csv: the master catalog of 700+ deployments, with its own (mostly empty) auth-metadata columns probationary — source, 2026-10-05T06:59:45.234Z
  # MobilityData's GBFS systems.csv: the master catalog of 700+ deployments, with its