Does the eNanoMapper database API need an API key?

Does the eNanoMapper database API need an API key?

It depends on the operation. Of those checked on 2026-09-15, 11 refused an anonymous request and 1 answered one. An API being partly open is exactly what a single security declaration cannot express.

ERR-2026-1715, ERR-2026-1750, ERR-2026-1781, ERR-2026-1804, ERR-2026-1821, ERR-2026-1850, ERR-2026-1920, ERR-2026-1950, ERR-2026-1966, ERR-2026-2124, ERR-2026-2169, ERR-2026-1777

Every record behind those answers

12 open records, observed 2026-09-10. Every claim below carries the command that disproves it. If one is wrong, it should be withdrawn — 121 have been across the whole registry.

credentials are required (observed) (11)

The document establishes no authentication requirement for this operation; an anonymous request is refused with 401. The requirement is now observed rather than unknown.

ERR-2026-1715Exact chemical structure searchHTTP 403checked 2026-09-15, 2 times
ERR-2026-1750Exact similarity searchHTTP 403checked 2026-09-15, 2 times
ERR-2026-1781Search endpoint summaryHTTP 403checked 2026-09-15, 2 times
ERR-2026-1804Details of multiple studiesHTTP 403checked 2026-09-15, 2 times
ERR-2026-1821get substance studyHTTP 403checked 2026-09-15, 2 times
ERR-2026-1850Get substance composition as a datasetHTTP 403checked 2026-09-15, 2 times
ERR-2026-1920Substructure searchHTTP 403checked 2026-09-15, 2 times
ERR-2026-1950Get study summary for the substanceHTTP 403checked 2026-09-15, 2 times
ERR-2026-1966List substancesHTTP 403checked 2026-09-15, 2 times
ERR-2026-2124Substance compositionHTTP 403checked 2026-09-15, 2 times
ERR-2026-2169Get a substanceHTTP 403checked 2026-09-15, 2 times

Check it yourself:

curl -sS -o /dev/null -w '%{http_code}\n' https://api.ideaconsult.net/nanoreg1/enm/errata-probe-not-a-real-identifier/query/compound/errata-probe-not-a-real-identifier/errata-probe-not-a-real-identifier

usable with no account (observed) (1)

An anonymous request is answered with a machine-readable response. The operation is reachable with no account. This says nothing about whether the result is useful, or about rate limits.

ERR-2026-1777Apache Solr powered searchHTTP 200checked 2026-09-15, 2 times

Check it yourself:

curl -sS -o /dev/null -w '%{http_code}\n' https://api.ideaconsult.net/nanoreg1/select

If a record here is wrong

Run its check. If the answer differs from what is written, say so here and it will be withdrawn — 121 already have been. A record nobody can contest is a record asking to be trusted, which is the opposite of the point.

What this page does not tell you

This is not a clean bill of health for anything not listed. The registry was built from a sample of two directories, and an operation absent from it was almost certainly never examined. Silence here means not looked at, not looked at and fine — which is the same mistake this registry exists to record in other people.

What this is

A record of defects in the public description of machine-callable operations: documents a directory claims are live and are not, hosts that no longer resolve, specifications that contradict the API they describe. It is not a ranking, not a review, and not a judgement about the service. No credential is ever sent to anything listed here.

The whole registry, machine-readable: errata.json. Index of subjects: index.html.

Built from registry errata-2026-09-10@b7cb54d3a847. If manifest.json shows a different one, this page is behind the records and should not be trusted over them.