EVE New Citizens Q&A

Yes they are standard procedure. Go to EVE account management and navigate through the menus to API management (or google EVE API for a more direct link).

APIs generate a ID and verification code that you can share with whomever you please. These allow them to access information about your account (they can view but not modify). Things like assets, transactions, mails, skillpoints, etc. You can modify which of these things are included in the key, but most corps will require a full API with all of them.

You can delete the key at any time, terminating all access to it. Most corps will want your key active as long as you are in the corporation. You can also use APIs for third party programs like EVE Mon and EFT to automatically pull information about your character, which is very useful. However, it is recommended that you create a separate key for each use, in case you need to delete one.

It sounds like a lot of information to give out, but you'll find most "secure" corps will require it as a way of protecting their members, and it doesn't really hurt for them to have it unless you have something to hide, though always be aware of scams - API doesn't allow them to take your assets, but it will tell them what you have. For most newer players, it's not anything worth stealing though, so you have nothing to lose.

As Cara Forelli said, you can make your own key on the API management section and create one with access to all features or to only particular ones. If you're technically minded and curious as to what information you're giving out exactly, you can check out the New Eden Development wiki to see what calls can be used with each access mask.

The reason for it is to prevent thieves, spies, and to connect who you associate with, skills assets. While some corps don't need it the information will help make a decision and depending on what the corp does this will make it easier to guide and mentor player unfamiliar to aspects of the game. And as said befor you can delete or revoke acess at any time.

If you have questions about common recruitment practices you are welcome to ask several of us who frequent the npq&a have been or are recruiter and are happy to educate new players.

For every logical reason to hand out API details, there is an equally paranoid reason not to.

For every logical reason to not hand out your API details, there is an equally security-related one to do so.

Both corps and players often handle API keys in a completely ******** way. That's what you get when each and every gamer can start a corp. Not all of them do risk assessments on a professional level.

In my corp a newbie pilot won't be exposed to multiple signups for forums and API keys. Nor will said newbie recieve any roles or titles apart from standard access to our T1 junkpile. But the dudes handling corporate affairs are most definately under a certain amount of scrutiny, which is accepted because why the hell would a corporation not safeguard it's more serious investments? It's logical a diplomat or POS manager is subject to peer review.

Then there is the variation of corps and alliances, what they do and whom they wish to recruit. Some corps play a higher stakes game then others. In my experience, you can simply tell why certain API data is requested and you either agree with that policy or not. It would entirely depend of what my role in a corp would be, whether or not I'd agree with handing out full API or not.

API checks are the most useless form of security checks for possible recruits.

Too bad 99.995% of EVE still hasnt seen that. It only shows what that account has in the 'logs'. So with a seperate account and some clever work you can be a spy and no API will flush you out.


I thus refrain from giving my full API unless they have a damn good reason and I get something in return.

For those things there is a simple thing called EVEBoard.

For fleet doctrines 》》 fleet-up tool.

I would have to disagree. I have been able to prevent theft on more then one occasion by clever use of peoples API keys.
Some one hesitating, or not willing to share their API key waves a big red flag in my book. Maybe i'm different because I have a wormhole corp, but API checks are far from useless.

Don't worry, OP. I'll handle this for you.
Each player has something called an API Key. API Keys are a series of numbers and letters randomly generated for your character / account. Your API shows what you've been up to: your current financial state, transactions, assets, mails, location etc. It is considered normal for a corporation to check your API to make sure you're not an AWOXer. What is an AWOXer anyways?
An AWOXer is generally somebody that infiltrates a corp, becomes good friends with all the members and earns a huge amount of trust, then opens up a cyno field (a portal for other ships) for his friends to kill all the corp members. AWOXing is named after a player that first practiced this act (Awox).
So, your CEO, in order to prevent somebody coming in the corp, opening a Black Ops cyno and have Stealth Bombers bombing the sh*t out of everybody, will look up your API Key to see if you've been having any suspicious mails, training suspicious skills or in general to see if you've been up to no good.