Todd Motto is maintaining a categorized list of public JSON APIs here. As of right now he’s listed 322 endpoints in 26 categories. There are 174 that don’t need authentication, 63 that require OAuth, 80 that take an API key, and 245 that support HTTPS.
It’s a great list, though certainly there must be more.
If you’d like to contribute, Todd has kindly provided some instructions.