Web resources

it should therefore be kept secure

Tutorials

work

Create and manage an API key

API key or an OAuth 2.0 token

a single, global API key

service area

routing

to all of the services

to access some scopes

you can access all scopes

and you do not need to enable pay-as-you-go.

BETA

The only items supported are items for data services (hosted layers) and web maps.

tutorial

BETAThe API key functionality to access items for private data services with an ArcGIS Developer account is currently in beta and has deployment restrictions. To learn more, go to the FAQ.

NoteIf you have an ArcGIS Online account, API keys cannot be used to access private content items. However, you can use OAuth 2.0 to obtain ArcGIS identity credentials to access private organization and user content and services on your user's behalf. Learn more in OAuth 2.0.

we do not recommend this method because browsers may remove the path due to privacy concern

regularly monitoring your API key usage

Account information

location services

public-facing application

There are three kinds of access tokens:

ArcGIS identity

Application credentials

Your choice of API.

The level of security required

Consider the following

Where the security access will take place

Application credentials

application

Application credentials

will use private hosted data

Solution

You are building an application using an ArcGIS API.

Content management

Tip

. Supports using a token obtained from OAuth 2.0 but lacks advanced identity management features.

Authentication methods