generated: '2026-07-20'
method: derived
source: openapi/pixlee-content-api-openapi.yml + developers.pixlee.com docs
standards:
  - id: openapi-3.1
    conforms: true
    evidence: Provider publishes OpenAPI 3.1.0 fragments per endpoint on the developer portal.
  - id: apikey-auth
    conforms: true
    evidence: securityScheme type apiKey (api_key) in query.
  - id: hmac-request-signing
    conforms: true
    evidence: Write requests require a Base64 HMAC-SHA1 Signature header of the JSON payload.
  - id: oauth2
    conforms: false
  - id: oidc
    conforms: false
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors are not returned as application/problem+json; responses use a data-key envelope.
  - id: json-api
    conforms: false
  - id: pagination
    conforms: true
    evidence: page / per_page query parameters on the content consumption endpoint.
  - id: idempotency
    conforms: false
    evidence: No Idempotency-Key header documented.
  - id: webhooks
    conforms: false
    evidence: No server-side webhooks; only client-side JavaScript widget events.