generated: '2026-08-09'
method: searched
source: https://www.nutrientsdb.com/api/docs
spec_source: openapi/nutrientsdb-sample-api-openapi.yml
docs: https://www.nutrientsdb.com/api/docs
description: >-
  The NutrientsDB Sample API requires NO authentication. This is an explicit, documented posture,
  not an omission: the docs page states "No authentication" alongside "HTTPS" and "CORS enabled",
  and the OpenAPI declares no components.securitySchemes and no security requirement on its single
  operation. Verified by an anonymous live call that returned 200 with data. There are no API keys
  to issue, no OAuth surface, no scopes, and therefore no scopes/ artifact for this provider.
summary:
  types: []
  authentication_required: false
  anonymous_access: true
  api_key_in: []
  oauth2_flows: []
schemes: []
public_access:
  model: open-keyless-read-only
  transport: https
  methods_allowed: [GET, HEAD, OPTIONS]
  cors:
    enabled: true
    access_control_allow_origin: '*'
    access_control_allow_methods: GET, HEAD, OPTIONS
    access_control_allow_headers: Content-Type
    notes: >-
      Wildcard CORS with no credentials makes the endpoint directly callable from browser and agent
      runtimes with no proxy or key-broker in front of it.
  scope_of_access: >-
    The keyless endpoint exposes only the public 1,000-food sample. The full ~2.9M-food NutrientsDB
    dataset is not behind an authentication wall on this API — it is not exposed by this API at all.
    It is sold as a one-time-license downloadable dataset for local use, so the commercial boundary
    is a delivery boundary, not an auth boundary.
x-evidence:
  fetched: '2026-08-09'
  probes:
    - url: https://www.nutrientsdb.com/api/foods?q=banana&limit=2
      http_status: 200
      note: Anonymous request with no Authorization header or key parameter returned data.
    - url: https://www.nutrientsdb.com/api/openapi
      http_status: 200
      note: OpenAPI 3.1.0 declares no components.securitySchemes and no security[].
    - url: https://www.nutrientsdb.com/api/docs
      http_status: 200
      note: Docs page states "No authentication".
cross_links:
  conventions: conventions/nutrientsdb-conventions.yml
  conformance: conformance/nutrientsdb-conformance.yml