Kroger vs WhiskyHunter

Kroger's public API exposes product search, pricing, and store-locator data across its US supermarket banners for registered developer applications using an OAuth client-credentials token. A live GET against the real gateway, api.kroger.com, returned a genuine 401 'access_token is missing' JSON error while carrying an echoed Access-Control-Allow-Origin header, resolving cors unknown -> yes and reconfirming API Key auth in the same probe.

WhiskyHunter aggregates historical results from online whisky auctions — winning-bid averages, trading volume, and lot counts across dozens of auction houses over time — as a free, keyless, read-only statistics API. A live GET against the real gateway, whiskyhunter.net/api, returned genuine JSON with no Access-Control-Allow-Origin header, resolving cors unknown -> no; auth None was reconfirmed by the same keyless 200.