Niche — Editorial Intelligence

3 of the 25 tools listed anonymously say in their own descriptions that they need an account or a key (niche_signal_scan, niche_intelligence_query, niche_draft_create), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

The server exposes a public surface before authorization: niche_signal_scan, niche_draft_direct, niche_intelligence_query, niche_session_state, niche_angle_propose, niche_draft_create, niche_draft_revise, niche_draft_publish, niche_brand_profile_set, niche_list_sessions, niche_brand_kit_ingest, niche_brand_kit_ingest_status, niche_voice_profile_ingest, niche_brand_profile_get, niche_brand_kit_guided_setup, niche_brand_kit_update, niche_render_image_card, niche_render_reel, niche_session_revert, niche_session_cancel, niche_session_export, niche_add_output, niche_reuse_asset, niche_attach_image, niche_whoami.