Hello, this is the Customer Success team at GeoTechnologies Inc.
As we receive various questions daily at the MapFan API support desk, we often realize, "We could have explained this more clearly..."
Therefore, we've looked back at the questions received in the second half of fiscal year 2025 and compiled the TOP 3 most frequently asked questions.
We hope this will be helpful to you.
#1: "Tell me about Authentication IDs and API Keys" — The Basics of MapFan API Authentication You Should Know
Q. Questions we received:
"How can I obtain an Authentication ID to use MapFan API?"
"Can I use one Authentication ID for various services?"
"Can I use the provided Authentication ID with the Road Traffic Volume API?"
"Can I access the production environment with a test Authentication ID?"
The most frequently asked questions regarding MapFan API usage are about "MapFan API authentication."
Both Authentication IDs and API Keys are authentication credentials required when using MapFan API, and they contain information that controls access to the production environment and optional features.
Without Authentication IDs or API Keys, anyone could use the API, creating risks of data theft or misuse. These are essential for ensuring service quality.
Here, we've compiled actual inquiry cases regarding Authentication IDs, Access Keys, and API Keys.
📌 MapFan API Authentication Methods
MapFan API provides two types of API authentication methods:
1. Authentication ID / Access Key
Execute the Authentication API (auth) by providing your issued "Authentication ID" as an input parameter. Upon successful authentication, an "Access Key" will be returned in the response.
You can then use each function API by providing this "Access Key" as an input parameter.
2. API Key
You can use the function APIs by providing your issued "API Key" in the x-api-key request header.
Functions that use API Keys:
- traffic-car
- traffic-pedestrian
- vectormap
- matching
- routematrix
The authentication method for each API is detailed in the MapFan API Reference, so please check it out.
📚 How to check authentication methods for each API
Specific information about "which API uses which authentication method" is detailed in the MapFan API Reference, which is stored in the same location as the technical specifications.
Downloading the MapFan API Reference:
- Current subscribers: From 'Downloads' on MapFan Developers Support *Account and login required
- Non-subscribers: From 'Download MapFan API Specifications' on the GeoTechnologies official website
🔍 Frequently Asked Questions and Answers
📝 About Obtaining Authentication IDs
Q1: I applied for the trial plan. How will the Authentication ID be provided?
A1: Regarding the Authentication ID for using the MapFan API trial plan, our sales representative will contact you separately.
After your application, our sales representative will contact you with the Authentication ID and usage instructions.
🏢 About Test Environment and Production Environment
Q2: Can the Authentication ID provided for testing only access the test environment URL?
A2: Yes, when we provide an Authentication ID for testing purposes, it can only access the test environment URL.
If you want to use it in the production environment:
- A contract is required, so please contact your sales representative.
- After the contract procedures are completed, we will grant permissions so you can access the production environment URL.
Important points:
- Even when you can access the production environment, the Authentication ID itself does not change
- Access becomes possible when we grant the permissions
Q3: Are there any differences in available features between the test environment and production environment?
A3: What you can do in the test environment and production environment is the same.
Only the URL you access is different; there are no functional differences.
🔄 About Using Authentication IDs
Q4: Can I use one Authentication ID for various services?
A4: ❌ Authentication IDs are issued for each service, and we prohibit using the current Authentication ID for different services.
When the current service ends:
- We will stop the current Authentication ID
- For a different development project, we will issue a new Authentication ID
We ask that you use the appropriate Authentication ID for each service.
🗝️ About the Difference from API Keys
Q5: Are the provided Authentication ID and the API Key for matching API different things?
A5: Yes, they are different.
The following APIs require API Keys:
- traffic-car
- traffic-pedestrian
- vectormap
- matching
- routematrix
⚠️ Important note:
If you wish to use the above APIs, a separate contract and access permission grant are required.
🔒 About Security
Q6: We plan to store the Access Key in the browser's session storage. Are there any security risks?
A6: No matter how securely you store the Authentication ID and Access Key on the client side, if the client directly accesses MapFan API, the following risks exist:
⚠️ Specific risks:
・ In the browser's developer tools, the Authentication ID and Access Key added to the request URL are exposed
・ API Keys are specified in the request header (x-api-key), unlike Authentication IDs or Access Keys which are specified in query parameters, but they can also be viewed in the developer tools
・ Malicious users can obtain and misuse authentication credentials
・ The PV count from such misuse will be billed to the legitimate customer
・ While Access Keys become invalid after 48 hours, misuse within the validity period cannot be prevented
✅ Recommended measures:
Please prepare a dedicated server that communicates with MapFan API on your end,
and configure your system so that communication with MapFan API using Authentication IDs,
Access Keys, and API Keys is performed only on the server side, not from the client.
💬 From the Support Team:
If you have any questions about Authentication IDs, Access Keys, or API Keys, please feel free to contact our support team.
✅ Summary: The Support Team is on your side
The content introduced today consists of actual questions we've received from many customers.
You may have thought, "I wonder if it's okay to ask about something like this..." but please feel free to contact us with any question, no matter how small.
The Support Team will do everything we can to support you in using MapFan API smoothly.
Check out the other top questions: