An API key is a code players can generate in their account settings that can allow third-party apps to access certain account data in a read only manner via use of the API.
Usage
API keys may be created or deleted at https://account.arena.net/applications.
During the creation of a key, the player will need to give it a name and a set of permissions. The name is purely for the player's reference, though any third-party app the key is given to will be able to view the name.
The permissions of an API key designate what data a third party app would be able to access, if given this key. Permissions may not be changed after a key is created.
- account
- This permission is mandatory for all keys. It allows access to your account name and ID, home world, joined guilds, and date of account creation.
- builds
- Allows access to your currently equipped specializations, traits, skills, and equipment for all game modes.
- characters
- Allows access to information on your characters, including name, level, race, gender, class, age, creation date, and death count.
- guilds
- Allows access to guild-related information such as rosters, history, and MOTDs for all guilds you are a member of.
- inventories
- Allows access to your account vault, material storage, and character inventories and equipment.
- progression
- Allows access to your achievements, story progression, dungeon unlocks, masteries, hungry cat scavenger hunt, and PvE progress.
- pvp
- Allows access to your PvP stats, match history, reward track progression, and custom arena details.
- tradingpost
- Allows access to your Trading Post transactions. This includes your current (pending) transactions, and up to 90 days of your past transactions.
- unlocks
- Allows access to a list of skins and dyes you have unlocked.
- wallet
- Allows access to view your account wallet.
Deleting an API key takes effect immediately, and the API key will no longer work for any third party apps.
Authenticated endpoints
Authenticated endpoints can accept the API key in two ways.
- Via the Authorization header field:
Authorization: Bearer [api key].
- As most browsers prevent CORS, this method will only be possible via custom applications. If using a browser, use the method below.
- Additionally, preflight requests are not supported by the API backend.
- Via the access_token query parameter:
?access_token=[api key]. This method circumvents the preflight requests of the CORS standard.
- Full list of authenticated endpoints
| API endpoint | Required authorization |
|---|
| API:2/account | account |
| API:2/account/achievements | account, progression |
| API:2/account/bank | account, inventories |
| API:2/account/buildstorage | account |
| API:2/account/dailycrafting | account, progression |
| API:2/account/dungeons | account, progression |
| API:2/account/dyes | account, unlocks |
| API:2/account/emotes | account |
| API:2/account/finishers | account, unlocks |
| API:2/account/gliders | account, unlocks |
| API:2/account/home/cats | account, progression, unlocks |
| API:2/account/home/nodes | account, progression, unlocks |
| API:2/account/homestead/decorations | account, unlocks |
| API:2/account/homestead/glyphs | account, unlocks |
| API:2/account/inventory | account, inventories |
| API:2/account/jadebots | account, unlocks |
| API:2/account/legendaryarmory | account, inventories, unlocks |
| API:2/account/luck | account, progression, unlocks |
| API:2/account/mailcarriers | account, unlocks |
| API:2/account/mapchests | account, progression |
| API:2/account/masteries | account, progression |
| API:2/account/mastery/points | account, progression |
| API:2/account/materials | account, inventories |
| API:2/account/minis | account, unlocks |
| API:2/account/mounts/skins | account, unlocks |
| API:2/account/mounts/types | account, unlocks |
| API:2/account/novelties | account, unlocks |
| API:2/account/outfits | account, unlocks |
| API:2/account/progression | progression, unlocks |
| API:2/account/pvp/heroes | account, unlocks |
| API:2/account/raids | account, progression |
| API:2/account/recipes | account, unlocks |
| API:2/account/skiffs | account, unlocks |
| API:2/account/skins | account, unlocks |
| API:2/account/titles | account, unlocks |
| API:2/account/wallet | account, wallet |
| API:2/account/wizardsvault | account |
| API:2/account/wizardsvault/daily | account |
| API:2/account/wizardsvault/listings | account |
| API:2/account/wizardsvault/special | account |
| API:2/account/wizardsvault/weekly | account |
| API:2/account/worldbosses | account, progression |
| API:2/characters | account, characters |
| API:2/characters/:id/backstory | account, characters |
| API:2/characters/:id/buildtabs | account, builds, characters |
| API:2/characters/:id/core | account, characters |
| API:2/characters/:id/crafting | account, characters |
| API:2/characters/:id/equipment | account, builds, characters, inventories |
| API:2/characters/:id/equipmenttabs | account, builds, characters |
| API:2/characters/:id/heropoints | account, characters, progression |
| API:2/characters/:id/inventory | account, characters, inventories |
| API:2/characters/:id/quests | account, characters, progression |
| API:2/characters/:id/recipes | account, characters, inventories |
| API:2/characters/:id/sab | account, characters |
| API:2/characters/:id/skills | account, builds, characters |
| API:2/characters/:id/specializations | account, builds, characters |
| API:2/characters/:id/training | account, builds, characters |
| API:2/commerce | account |
| API:2/commerce/delivery | account, tradingpost |
| API:2/commerce/transactions | account, tradingpost |
| API:2/createsubtoken | account |
| API:2/guild/:id/log | account, guilds |
| API:2/guild/:id/members | account, guilds |
| API:2/guild/:id/ranks | account, guilds |
| API:2/guild/:id/stash | account, guilds |
| API:2/guild/:id/storage | account, guilds |
| API:2/guild/:id/teams | account, guilds |
| API:2/guild/:id/treasury | account, guilds |
| API:2/guild/:id/upgrades | account, guilds |
| API:2/pvp/games | account, pvp |
| API:2/pvp/standings | account, pvp |
| API:2/pvp/stats | account, pvp |
| API:2/tokeninfo | account |
Trivia
- There is a limit of 200 API keys per account.
