Status & verification

The firewall fingerprints and rejects Node's undici with a 403, while curl gets HTTP 200 from the identical URL and headers.

A Cloudflare-style WAF fingerprints and rejects Node's undici outright. curl and Python both get HTTP 200 from the same URL with the same headers.

Sends the required Accept-Language header and still 403s under Node; curl with the identical header and URL gets HTTP 200. Same fingerprinting class as the other two.

Omitting the date from timingsByCity is documented as "today", so the API redirects to the dated URL. Same class of alias as the NHL '/now' endpoint.

The documented URL keeps working; the redirect target is internal to Google and changes shape, so pinning it would break the example rather than fix it.

Redirects to a per-request cache path for the randomly chosen photo, so the target is different on every call by design.

`/standings/now` is an intentional alias that 302s to the current date. Following the redirect is the documented behaviour.

rdap.org is a bootstrap service: it looks up the authoritative registry for the TLD and redirects there. Following the redirect is the protocol.

Agify, Genderize and Nationalize are one provider (Demografix) sharing a single free allowance of 100 names per day per IP, answering 429 with {"error":"Request limit reached"} once it is spent. Several verifier runs in a day exhaust it on their own. All three pages state the daily limit and carry a 429 entry.

The free tier allows 5 requests per IP per day, so the second verifier run of any day 429s. Quota exhaustion, the same class as the NASA DEMO_KEY entries.

Agify, Genderize and Nationalize are one provider (Demografix) sharing a single free allowance of 100 names per day per IP, answering 429 with {"error":"Request limit reached"} once it is spent. Several verifier runs in a day exhaust it on their own. All three pages state the daily limit and carry a 429 entry.

NASA's DEMO_KEY is shared globally and capped near 30 requests/hour per IP. The verifier alone hits four NASA endpoints, so a 429 means the shared demo quota is spent. Each page tells readers to register their own free key for exactly this reason.

NASA's DEMO_KEY is shared globally and capped near 30 requests/hour per IP. The verifier alone hits four NASA endpoints, so a 429 means the shared demo quota is spent. Each page tells readers to register their own free key for exactly this reason.

NASA's DEMO_KEY is shared globally and capped near 30 requests/hour per IP. The verifier alone hits four NASA endpoints, so a 429 means the shared demo quota is spent. Each page tells readers to register their own free key for exactly this reason.

NASA's DEMO_KEY is shared globally and capped near 30 requests/hour per IP. The verifier alone hits four NASA endpoints, so a 429 means the shared demo quota is spent. Each page tells readers to register their own free key for exactly this reason.

Agify, Genderize and Nationalize are one provider (Demografix) sharing a single free allowance of 100 names per day per IP, answering 429 with {"error":"Request limit reached"} once it is spent. Several verifier runs in a day exhaust it on their own. All three pages state the daily limit and carry a 429 entry.

Proxies to Internet Archive infrastructure that sheds load. The entry documents this intermittency in its errors section rather than pretending the endpoint is reliable.

Answers 200 to a standalone request (curl and Node alike) but 500s under the verifier's 4-way concurrency. Load shedding on OECD's side, not a dead endpoint.

Returns 500 on roughly one request in three (measured 2 of 6 across curl and Node). It scrapes municipal car-park sites, so a 500 tracks an upstream city site being down rather than the API being broken. The entry's errors section documents this.

Blocks all unauthenticated access while an F1 session is running, past seasons included, and says so in the 401 body. Documented product behaviour, so a verifier run during a race weekend is expected to fail here.