generated: '2026-08-09'
method: derived
source: openapi/isports-api-openapi.yml + https://www.isportsapi.com/en/docs.html
standards:
- id: rest-http
  conforms: true
  evidence: GET-only resource paths over HTTP/HTTPS returning application/json
- id: openapi
  conforms: false
  evidence: No OpenAPI/Swagger document is published; /openapi.json, /swagger.json, /api-docs and /v1/openapi.json
    all 404 on api.isportsapi.com, api2.isportsapi.com and www.isportsapi.com (probed 2026-08-09). The spec in openapi/
    was derived by API Evangelist from the provider documentation.
- id: oauth2
  conforms: false
  evidence: Query-string API key only; no OAuth surface
- id: oidc
  conforms: false
  evidence: /.well-known/openid-configuration 404 on all hosts
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors are returned as {code, message} inside an HTTP 200 body, not application/problem+json
- id: http-status-semantics
  conforms: false
  evidence: Authentication failure and unknown paths both answer HTTP 200 (observed 2026-08-09)
- id: rfc9116-security-txt
  conforms: false
  evidence: /.well-known/security.txt 404 on all hosts
- id: rfc8594-sunset-header
  conforms: false
  evidence: No deprecation or sunset policy published
- id: asyncapi
  conforms: false
  evidence: No event, streaming or webhook surface — change detection is poll-based via /changes and /modify
    endpoints
- id: tls
  conforms: true
  evidence: TLS 1.2 on api.isportsapi.com and api2.isportsapi.com, TLS 1.3 on www.isportsapi.com (probed 2026-08-09);
    no HSTS
compliance_program:
  published: false
  note: No trust center, SOC 2 / ISO 27001 / PCI / GDPR certification page or vulnerability-disclosure policy was
    found (probed 2026-08-09).