generated: '2026-07-18'
method: searched
source: https://github.com/appdotnet/api-spec/tree/new-docs/content/reference
note: >-
  Standards conformance asserted from the preserved App.net api-spec. The service is
  retired; no compliance certifications (SOC 2 / ISO 27001 / etc.) were ever published,
  so no `Compliance` pointer is emitted.
standards:
- id: oauth2
  conforms: true
  evidence: >-
    Documentation states authentication uses the OAuth 2.0 protocol (RFC 6749) with
    bearer tokens; authorization-code, implicit, client-credentials and password flows.
- id: oauth2-bearer-rfc6750
  conforms: true
  evidence: 'Access tokens sent as Authorization: Bearer <token>.'
- id: oidc
  conforms: false
  evidence: No OpenID Connect discovery or id_token surface documented.
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors use a custom {meta.code, error_message, error_slug} envelope, not application/problem+json.
- id: rfc8594-sunset-header
  conforms: false
  evidence: No Sunset/Deprecation header support documented.
- id: pagination-cursor
  conforms: true
  evidence: Cursor pagination via since_id/before_id and meta.max_id/min_id/more.
- id: rate-limit-headers
  conforms: true
  evidence: X-RateLimit-Limit / X-RateLimit-Remaining / X-RateLimit-Reset and Retry-After on 429.
- id: cors
  conforms: true
  evidence: CORS supported for authenticated cross-domain requests.
- id: jsonp
  conforms: true
  evidence: JSONP supported via callback query param for unauthenticated requests.