In order to access the API securely what do I need to do?

Is it as simple as using https and letting my CMS manage session authentication?

  • Have you implemented the RESTFul APIs calls using https ? Commented Dec 13, 2015 at 11:26

2 Answers 2


Whether or not https is used would be dependent on the CMS, but this is certainly recommended. Other than making sure the Access AJAX Api permission is set up for a particular CMS user, you will also need to pass a user api key that is assigned to the CiviCRM contact record associated with that CMS user.

Details at: http://wiki.civicrm.org/confluence/display/CRMDOC/REST+interface#RESTinterface-SettinguptousetheRESTAPI


The REST API requires that you specify the site key and an API key. Details can be found here.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.