generated: '2026-08-02'
method: derived
source: >-
  openapi/colossal-biosciences-content-openapi.yml (derived from https://colossal.com/wp-json/)
  plus live response headers observed on GET /wp-json/wp/v2/posts, 2026-08-02
api: colossal-biosciences:content
authentication:
  anonymous_read: true
  scheme: WordPress Application Passwords over HTTP Basic
  authorization_endpoint: https://colossal.com/wp-admin/authorize-application.php
  browser_scheme: logged-in cookie + X-WP-Nonce header
  artifact: authentication/colossal-biosciences-authentication.yml
idempotency:
  supported: false
  note: >-
    No idempotency key header or parameter is exposed on any route in the discovery document,
    and none is documented. No Idempotency pointer is wired in apis.yml — the provider has no
    idempotency contract to advertise.
pagination:
  style: page-number
  request_params:
  - {name: page, type: integer, default: 1, minimum: 1}
  - {name: per_page, type: integer, default: 10, minimum: 1, maximum: 100}
  - {name: offset, type: integer, note: available on collection routes}
  response_headers:
  - {name: X-WP-Total, meaning: total items in the collection}
  - {name: X-WP-TotalPages, meaning: total pages at the current per_page}
  link_header: 'RFC 8288 Link header with rel="next" / rel="prev"'
  observed: 'GET /wp/v2/posts?per_page=1 -> X-WP-Total: 238, X-WP-TotalPages: 238'
field_selection:
  sparse_fields:
    param: _fields
    note: comma-separated list of top-level fields to return
  expansion:
    param: _embed
    note: >-
      Inlines linked resources (author, featured media, terms, replies) into _embedded,
      driven by the _links relations each resource carries.
  context:
    param: context
    values: [view, embed, edit]
    default: view
    note: edit context requires authentication
ordering_and_filtering:
  params: [search, order, orderby, slug, status, after, before, modified_after, modified_before, include, exclude, categories, tags, author]
  note: taken verbatim from the route args in the discovery document
metadata:
  field: meta
  note: registered post meta; the site also returns an `acf` object (Advanced Custom Fields)
request_tracing:
  request_id_header: null
  note: no request-id or correlation header is emitted
versioning:
  scheme: uri-path-namespace
  current: wp/v2
  namespaces_present:
  - wp/v2
  - wp-site-health/v1
  - wp-block-editor/v1
  - wp-abilities/v1
  - mcp
  - batch/v1
  artifact: lifecycle/colossal-biosciences-lifecycle.yml
error_envelope:
  format: wordpress-rest
  rfc9457: false
  shape: '{"code": "<string>", "message": "<human string>", "data": {"status": <int>}}'
  observed: '{"code":"rest_forbidden","message":"Sorry, you are not allowed to do that.","data":{"status":401}}'
  artifact: errors/colossal-biosciences-problem-types.yml
rate_limiting:
  documented: false
  headers_observed: []
  note: >-
    No X-RateLimit-* or Retry-After headers observed. robots.txt requests Crawl-delay 10 for
    crawlers; the site sits behind Cloudflare, so edge rate limiting may exist but is not
    advertised.
batch:
  endpoint: /wp-json/batch/v1
  note: WordPress core batch endpoint; allow_batch is set on the posts/pages/media routes
cors:
  access_control_allow_headers: [Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type]
  access_control_expose_headers: [X-WP-Total, X-WP-TotalPages, Link]