# Pixxel conformance — cross-cutting standards
generated: '2026-07-20'
method: derived
source: openapi/pixxel-openapi-original.json
standards:
- id: oauth2
  conforms: false
  evidence: Only apiKey (bearer Personal Access Token) security scheme; no oauth2 flows.
- id: openid-connect
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors use a custom '{error:{code,message,details}}' envelope, not application/problem+json.
- id: stac
  conforms: true
  evidence: Archive/catalog surface is STAC-based (SpatioTemporal Asset Catalog) — /v0/archives/collections + items and STAC docs.
- id: pagination
  conforms: true
  evidence: List responses expose offset/limit + page_num/page_size with a common.Pagination object.
- id: rbac
  conforms: true
  evidence: Personal Access Tokens are scoped by organization, project, and role (RBAC).
- id: idempotency
  conforms: false
  evidence: No Idempotency-Key contract documented or in spec.