Music · head-to-head
Deezer vs Phishin
Deezer's REST API serves the catalog metadata behind the streaming app: tracks, albums, artists, playlists, charts, and full-text search. Unusually for a major streaming service its read endpoints are fully keyless — a plain GET against api.deezer.com returns real track data with no App ID, key, or token at all — while OAuth is reserved for endpoints that act on a user's own account, such as favorites or the activity feed. Responses can be requested as either JSON or XML via an output query parameter, and the API is free to use within Deezer's terms.
Phish.in is a free, listener-run archive of legal live Phish recordings, covering shows, tracks, songs, venues, and tours through its v2 REST API. Read endpoints (shows, tracks, search) are fully public and keyless — a plain GET against /api/v2/shows returns real data with no credentials at all — while account-scoped features like playlists and likes require a logged-in user. The project is open source and privately funded, with an MCP endpoint also available for AI-assistant clients.
| Deezer | Phishin | |
|---|---|---|
| Authentication | None | None |
| Pricing | free | free |
| Formats | JSON, XML | JSON |
| CORS | no | yes |
| HTTPS | Yes | Yes |
Phishin supports CORS, while Deezer doesn't — pick Phishin for direct browser calls.