Coffee vs Kroger

Coffee returns a fresh random coffee-photo URL as JSON on every request from a hand-curated image set, with no signup needed — a lightweight novelty API for placeholder or demo imagery. A live GET against the real host, coffee.alexflipnote.dev, returned genuine JSON with no Access-Control-Allow-Origin header, resolving cors unknown -> no; auth None was reconfirmed by the same keyless 200.

Kroger's public API exposes product search, pricing, and store-locator data across its US supermarket banners for registered developer applications using an OAuth client-credentials token. A live GET against the real gateway, api.kroger.com, returned a genuine 401 'access_token is missing' JSON error while carrying an echoed Access-Control-Allow-Origin header, resolving cors unknown -> yes and reconfirming API Key auth in the same probe.