Lordicon vs Rijksmuseum

Lordicon is a library of 46,400+ static and animated (Lottie/JSON-based) icons, embeddable via its player script or fetched directly from its CDN with no key required for free use; paid plans unlock the full catalog and commercial licensing. A live GET against the real asset host, cdn.lordicon.com, returned a genuine 404 for a made-up asset ID while carrying Access-Control-Allow-Origin: *, reconfirming both auth None and cors yes — the marketing homepage itself sends a stricter, non-wildcard CORS header, but that isn't the asset-serving endpoint.

The Rijksmuseum has replaced its old key-gated REST collection API with a free, fully keyless Linked Open Data service: a Linked Art-based Search API at data.rijksmuseum.nl/search/collection and a Persistent Identifier Resolver at id.rijksmuseum.nl, both returning JSON-LD. A live GET against the real search endpoint returned 1,463 genuine matching results for a Rembrandt query with Access-Control-Allow-Origin: *, and its own docs explicitly state no API key is needed — correcting the stored url off its retired /object-metadata/api/ path (now a 404), auth API Key -> None, and cors unknown -> yes.