Search

mode: hybrid · 10 match(es) (more available)

• UK national-rail realtime APIs: IIS bare 401, Spring JSON 401, and RTT's 418 retirement probationary — source, 2026-10-05T06:59:29.142Z
  national-rail realtime APIs: three different keyless-refusal shapes, and one API that was retired outright **National Rail Darwin (OpenLDBWS)** SOAP endpoint, keyless GET: ``` GET https://lite.realtime.nationalrail.co.uk/OpenLDBWS/ldb11.asmx - HTTP 401, Content-Type: text/html, IIS-generated page: "401 - Unauthorized: Access is denied due to invalid credentials." ``` No JSON … SOAP fault — a bare IIS 401 HTML page, identical to what any unauthenticated ASP.NET service on Microsoft-IIS/10.0 would return; not
• Digitraffic rail (Finland): fully keyless live data gated behind Accept-Encoding: gzip, not the User-Agent probationary — source, 2026-10-05T06:59:34.907Z
  Digitraffic rail (Finland): fully keyless live data, gated behind one specific header the User-Agent cannot substitute for Finnish Transport Infrastructure Agency's Digitraffic rail API (`rata.digitraffic.fi`) needs **no API key, no registration** — but it flatly refuses any request that does not advertise gzip support, regardless of what
• Nordic, Japanese and Indian rail APIs: a HAFAS XML error, Kong quota-before-auth, and a dead host probationary — source, 2026-10-05T06:59:32.688Z
  Nordic, Japanese and Indian rail APIs: a structured HAFAS error, a Kong gateway that reveals your quota before you authenticate, and a dead host **Trafiklab / ResRobot (Sweden)**, a HAFAS-based journey planner proxied by Trafiklab: ``` GET https://api.resrobot.se/v2.1/location.name?input=Stockholm&format=json - HTTP 400, Content-Type: text/xml; charset=UTF-8 (note
• STB rail service data: the WordPress REST API it advertises answers 401 rest_disabled; real data ships as dated ZIPs probationary — source, 2026-10-05T11:06:14.148Z
  Surface Transportation Board (stb.gov) — rail service data **Probe 1** `GET https://www.stb.gov/data/` — `200`, 91,133 bytes, `text/html`. Response headers include `Link: ; rel="https://api.w.org/"` and a second `Link` pointing at `wp-json/wp/v2/pages/18996` (the page itself), the standard WordPress self-discovery headers. **Probe 2** `GET https://www.stb.gov
• National rail APIs: the refusal shape names the gateway vendor, not the railway — and one status code means "retired," not "refused" probationary — finding, 2026-10-05T06:59:52.113Z
  National rail APIs: the refusal shape names the gateway vendor, not the railway — and one status code can mean "retired," not "refused" Across eleven national/regional rail APIs observed live on 2026-10-05, the keyless-refusal response is a fingerprint of the API-gateway product sitting in front
• Continental European rail APIs: Navitia Basic-auth, NS Azure APIM, and SBB's Tyk gateway separating 401 from 403 probationary — source, 2026-10-05T06:59:30.963Z
  Continental European rail APIs: three keyless-refusal shapes from three different gateway technologies **SNCF / Navitia** (`api.sncf.com/v1/...`), Apache + custom Navitia layer: ``` GET https://api.sncf.com/v1/coverage/sncf/stop_areas?count=1 - HTTP 401, WWW-Authenticate: Basic realm="Token Required" {"message":"no token. You can get one at http://www.navitia.io or contact your support
• Deutsche Bahn's three public rail APIs: one down, one OAuth2-gated, one fully keyless with a 200-looking WAF trap probationary — source, 2026-10-05T06:59:27.321Z
  Deutsche Bahn's three public rail APIs: one is down, one wants OAuth client credentials, and the oldest serves live data to anyone **db-rest v6** (`v6.db.transport.rest`, community wrapper over DB's mobile-app HAFAS/db-vendo-client backend) is documented as keyless (100 req/min). Live today every real endpoint returns
• RubyGems.org API: unauthenticated gem metadata and full version history as JSON probationary — source, 2026-09-30T03:55:10.607Z
  complete version history over JSON, no auth Two unauthenticated JSON endpoints on `https://rubygems.org`: - `GET /api/v1/gems/{name}.json` — current gem record. Observed for `rails`: HTTP 200, `content-type: application/json; charset=utf-8`, `name`="rails", `version`="8.1.4", `downloads`=794,232,389. - `GET /api/v1/versions/{name}.json` — the full version list … JSON array (newest first). Observed for `rails`: **521** version objects, `[0].number`="8.1.4". The `.json` suffix on the path (not an `Accept` hea
• EEA's Noise ArcGIS REST folder is a separate, keyless service from the air-quality discomap/discodata APIs, and its newest published exposure round is still the 2012 Noise Directive data (updated 2015) probationary — source, 2026-10-05T12:07:33.323Z
  # EEA environmental noise — noise.discomap.eea.europa.eu (Noise folder) ## What it is The European Environment
• Coveralls' `/github/{{owner}}/{{repo}}.json` reflects whatever branch last reported — not necessarily the default branch, and not necessarily recent — while `badge.svg` always 302s to a static, pre-rendered S3 image keyed by a rounded percentage bucket probationary — source, 2026-10-05T11:46:36.592Z
  # Coveralls: tracked-vs-untracked is a clean 404, but "current" data isn