MyAnimeList vs NekosBest

MyAnimeList's official v2 REST API was reconfirmed live at api.myanimelist.net/v2 — an unauthenticated request returned a 403 from the real gateway rather than a network error, and a preflight OPTIONS carried no Access-Control-Allow-Origin header, so cors is corrected to no. It requires a registered OAuth 2 client, the same one the community 'Official MAL API' club (the entry's stored url) walks new developers through, and remains completely free to use.

NekosBest was reconfirmed live at nekos.best/api/v2 with a real image lookup and an explicit Access-Control-Allow-Origin: * header. It needs no API key, is rate-limited to 200 requests/minute per the response headers, and has no paid tier.