

Pokémon Information.
Pokéapi is a free Games & Comics API that requires no API key, is served over HTTPS and has unconfirmed CORS support.
An open RESTful API for Pokémon data
Details from pokeapi.co.

Unified API suite · now live
Geocode an address, validate an email, track a flight or pull stock data with one account, one dashboard and one API key.
Pokémon TCG Information
Yes. The Pokéapi is listed in the Games & Comics category of the public-apis directory, which only includes APIs that are free or have a free tier. Check its documentation for rate limits and paid plans.
No. The Pokéapi requires no authentication, so you can start making requests without signing up.
CORS support for the Pokéapi is unknown. Test a request from the browser, and fall back to a server-side call if it is blocked.
Yes. The Pokéapi is served over HTTPS, so it's safe to use in production.