Icon Horse vs Rijksmuseum

Icon Horse fetches the favicon for any given domain — trying the site's own icon first and falling back through a chain of alternate sources so a usable image is returned almost every time — with no signup. A live GET against the real host returned a genuine PNG carrying Access-Control-Allow-Origin: *, reconfirming both auth None and cors yes.

The Rijksmuseum has replaced its old key-gated REST collection API with a free, fully keyless Linked Open Data service: a Linked Art-based Search API at data.rijksmuseum.nl/search/collection and a Persistent Identifier Resolver at id.rijksmuseum.nl, both returning JSON-LD. A live GET against the real search endpoint returned 1,463 genuine matching results for a Rembrandt query with Access-Control-Allow-Origin: *, and its own docs explicitly state no API key is needed — correcting the stored url off its retired /object-metadata/api/ path (now a 404), auth API Key -> None, and cors unknown -> yes.