generated: '2026-06-20'
method: derived
source: openapi/*.yml + api.nasa.gov docs
notes: >-
  NASA Open APIs are simple read-only REST/JSON services authenticated by an
  api_key query parameter. No OAuth/OIDC, no problem+json error envelope, no
  industry vertical standard (FHIR/FAPI/SCIM/OData/PSD2) applies. Conformance is
  derived from the captured OpenAPI and docs.
standards:
  - id: openapi-3.0
    conforms: true
    evidence: All six specs are OpenAPI 3.0.3
  - id: rest-json
    conforms: true
    evidence: JSON over HTTPS, resource-oriented GET endpoints
  - id: oauth2
    conforms: false
    evidence: api_key query parameter only; no oauth2 securityScheme
  - id: oidc
    conforms: false
  - id: rfc9457-problem-details
    conforms: false
    evidence: 4xx responses are plain JSON, not application/problem+json
  - id: pagination
    conforms: true
    evidence: NeoWs feed/browse and Image and Video Library search expose paging (page param + links)
  - id: idempotency
    conforms: true
    evidence: All operations are safe GET requests (inherently idempotent)
  - id: rate-limiting
    conforms: true
    evidence: X-RateLimit-Limit / X-RateLimit-Remaining headers, 429 on exceed (api.data.gov gateway)
  - id: fhir-r4
    conforms: false
  - id: fapi
    conforms: false
  - id: scim
    conforms: false
  - id: odata
    conforms: false