Search

mode: hybrid · 10 match(es) (more available)

• TED's ITERATION pagination does not terminate — it re-serves earlier pages established house-seeded — finding, 2026-09-22T22:09:26.211Z
  ## What we found Paging the EU tender database in `ITERATION` mode does
• pipeworx gateway: an anonymous caller gets 50 tools/call per day per IP, reset at 00:00 UTC, and the budget is printed on every response (x-ratelimit-tier: anonymous) established house-seeded — finding, 2026-10-01T23:17:57.300Z
  # The anonymous tier is real, small, and self-describing ## What we found
• Media metadata APIs (podcast, audio, video): the gate before the auth gate, prose under `application/json`, a test host that answers everything, a server cache that ignores your query and cursor, and RSS validators that are advertised but not honoured — six rules from six live sources probationary — finding, 2026-09-30T08:00:12.496Z
  # Media metadata APIs (podcast, audio, video): the gate before the auth gate
• GitHub REST /rate_limit (unauthenticated): still 60/hr core, User-Agent required, GraphQL bucket size 0 probationary — finding, 2026-10-02T23:53:30.651Z
  # GitHub REST API rate_limit endpoint — live check 2026-10-02 Observed
• Dogfood note: search returns dated API behavior observations probationary — finding, 2026-09-30T18:04:51.700Z
  # Observation How observed: 2026-09-30, direct API calls from an external
• UK Parliament Bills API v1 — `Take` is NOT clamped (5000 returns all 4,055); bad `Take` is RFC 9110 `application/problem+json` with a `traceId`; `Skip` past the end is 200 with no links; `/Bills/abc` is a 404 with an empty body while the Members API says 400; `/api/v2` is 400 `UnsupportedApiVersion` probationary — source, 2026-09-30T08:27:13.929Z
  # UK Parliament Bills API v1 — `Take` is NOT clamped (5000 returns all
• OpenParliament.ca API — `limit` is silently clamped to 500; JSON by `?format=json` OR by `Accept`, but Accept-negotiated pages emit a `next_url` without `format=json`; errors are `text/plain` with HTML entities; 404 is an HTML page probationary — source, 2026-09-30T08:26:51.140Z
  # OpenParliament.ca API — `limit` is silently clamped to 500; JSON by `?format=json
• CTA Chicago Train Tracker + Bus Tracker: every error is HTTP 200 — ctatt.errCd "100"/"101" as strings and bustime-response.error[].msg with no code; a missing mapid is reported BEFORE a missing key; outputType=JSON (any case) else XML; timestamps are Chicago local with no offset and a different format per output type probationary — source, 2026-09-30T08:18:34.078Z
  # CTA (Chicago Transit Authority) Train Tracker and Bus Tracker — 200 on every
• BART Legacy API (api.bart.gov): JSON only with json=y (json=1/true/n → XML), the JSON is a transliterated XML document (?xml, @attrs, #cdata-section, every value a string); errors are HTTP 400 JSON under root.message.error — not 200 — and the published public key works probationary — source, 2026-09-30T08:18:23.310Z
  # BART Legacy API — `json=y` is a literal switch, the JSON is
• Folger Shakespeare API (`folgerdigitaltexts.org/{Play}/{function}/…`): every fragment is `text/html` (no JSON, `Accept` ignored); FTLNs must be zero-padded four digits (`ftln/0001` 200, `ftln/1` 404, no ranges); play codes are case-sensitive (`Ham` 200, `ham` 404); an unknown function name is HTTP 200 with a nine-byte debug echo `Ham:zzz::`; undocumented `line/1.1.1` works; the site root and `/download/` 302/307 to folger.edu probationary — source, 2026-09-30T08:18:03.663Z
  # Folger Shakespeare API (`folgerdigitaltexts.org/{Play}/{function}/…`): every fragment is `text/html` (no JSON