These forums have been archived and are now read-only.

The new forums are live and can be found at

EVE New Citizens Q&A

  • Topic is locked indefinitely.

Running a Corporation: The API Check

#1 - 2011-11-16 21:45:07 UTC
Hello everyone,

I want to start my own Corporation soon. I have been doing a lot of reading about it, and one point that seems to be emphasized a lot is checking character API keys to maintain Corporation security.

So, understandably, I looked up information on checking API keys. I found some cool tools (EVEMon, EVEHQ), but sadly they don't give "the full picture" - just skills and standings, and a ship-fitting tool.

What I'm trying to figure out is how Corporations take API keys and check them? All the information I found was very out of date and not helpful.

I appreciate any help on this, thanks.

(And yes, this is an alt.)
Cruor Angelicus
#2 - 2011-11-16 22:19:33 UTC
Tbh now a days API checking has gotten more complicated with CAKs. With a CAK it is now possible to change which characters are can be accessed. This means someone could hide an alt from you and claim that they only have 1 character.

And if they do, I don't know of any way for you to force it out of them that they have more.
If one guy really does have just one char and he's legit I guess he wouldn't mind making two brand new chars to prove the slots are filled by meaningless characters...

The Drake is a Lie

Malcom Dax
Sebiestor Tribe
Minmatar Republic
#3 - 2011-11-17 00:19:52 UTC
To be honest, I'm not sure how useful an API check actually is for catching spies. Anyone that really wants to place a spy into a corp, assuming they know what they're doing, will be able to make a 'clean' looking character to use.

I get a much better feel for people by talking to them. I then use the API check to verify what they tell me and to see their skills in depth (for industry and invention).


#4 - 2011-11-17 01:42:56 UTC
I then use the API check

Okay but how are you doing that?

I'm mainly interested in viewing contracts, in-station trades, wallet transactions, characters on account, and skills.
Desmont McCallock
#5 - 2011-11-17 15:25:28 UTC  |  Edited by: Desmont McCallock
I'll step in, in order to shed some light into this situation.

When someone gives you an API key you can check the 'Type' of the key by calling the APIKeyInfo API call with that key credentials.

If the key type = 'Account' then there are no other characters than the one claimed to be.
if the key type = 'Character' then the key is restricted to that character, meaning that the account may have more than the character shown.

So always ask for an 'Account' type API key.

Of course someone can always be a spy even if he has only one character on an account. Successful spying works by having multi-accounts.

On behalf of
The EVEMon Dev Team
#6 - 2011-11-17 17:34:57 UTC  |  Edited by: Farrina
Thank you, I appreciate your thoughtful reply.

How can I use those codes? Can I just plut them into notepad and make them a webpage?

I'm trying to put them into my browser and I'm just getting 404's.
XS Tech
#7 - 2011-11-17 18:22:06 UTC  |  Edited by: Velicitia
1. you get someone's API Key
2. you go to the site Desmont listed.

let's say their UID is 1234, and the VC is ABCD

you would then check the account type by going to the site "" and it would come back with the info (note, if the forums make this a link, it will die horribly).

However, with you being ~2 months old, and having never left the rookie corp, I would strongly suggest that you DO NOT start your own corp just yet. There are downsides to being in a player-run corporation.

edit --

after that, then you can use tools like EVEMon and EVEHQ to determine if what the applicant is telling you is true or not (well, to some degree) -- i.e. if they tell you they can fly an orca or use T2 large artillery, you can confirm that.

if they're telling you they're brand new, and don't have any other accounts ... you have to take them at their word.

One of the bitter points of a good bittervet is the realisation that all those SP don't really do much, and that the newbie is having much more fun with what little he has. - Tippia

#8 - 2011-11-17 18:23:13 UTC
(And yes, this is an alt.)
#9 - 2011-11-17 18:24:05 UTC
you would then check the account type by going to the site "" and it would come back with the info (note, if the forums make this a link, it will die horribly).

Yeah I'm testing that with my own API keys and it works so long as that code is all I'm doing.

If I try anything else, such as journals, etc, it fails.
Desmont McCallock
#10 - 2011-11-17 19:19:54 UTC  |  Edited by: Desmont McCallock
Because the API key doesn't have the required access (AccessMask) to get those data. That was the whole point, CCP switched the API keys to CAK (customizble API keys). To give the user the ability to control what data gets exposed from the API key (thus the list on the right when you create the CAK).

Or you are not providing the characterID to the call. Check the parameters needed for each call from the EVEDev wiki site.
#11 - 2011-11-17 20:52:04 UTC  |  Edited by: Farrina
I'm definitely missing something.

When I put in this code:

it returns the following in a coded format:

error code="203" - Authentication failure.

Now I know the CAK I'm using has everything checked. Is there another code I'm supposed to add for CAKs?

-EDIT- Nevermind. I wasn't copy pasting the last character of the VCODE. It works now.

Anyway to get it to display in a non-coded format?
Desmont McCallock
#12 - 2011-11-17 21:27:27 UTC
XML formatted document is all you get. After that you will have to get some programming skills (to parse the XML) or know-how if you going to use GoogleDoc or Excel.
#13 - 2011-11-17 21:28:33 UTC
Desmont McCallock wrote:
XML formatted document is all you get. After that you will have to get some programming skills (to parse the XML) or know-how if you going to use GoogleDoc or Excel.

And that's probably well beyond the scope of a quick "just do this" forum thread, huh?
Desmont McCallock
#14 - 2011-11-17 22:01:24 UTC
Exactly. But you'll get more help if you pay a visit the EVE Technology Lab forum where all we techies (geeks) hang out.
Ireland VonVicious
Vicious Trading Company
#15 - 2011-12-01 19:11:31 UTC
Your over thinking it!

You don't have to check all api's.
Some corps do, some don't.

No api's checks equal a bad idea!
If you want you can check only those that you give permissions to.
As stated before spies get in no matter what.

What you are looking for when you get an api:

Is the toon training?
Does the sp seem high enough for thier age? (( 3 year old toon with 2mil sp might be an alt that is temp training ))
Do the skills match what they told you about in the interviews/chats with them? (( Yes you need to interview ))
Do they have the skill set that matches your corps needs?

Good luck!