Update to Caterpillar's Policy on Inactive API Client IDs
We are updating our policy on inactive client IDs. A client ID is essentially the username of an application used to authorize API requests. Each client ID must be registered on our platform and granted access to use APIs. To reduce the risk that old, unused client IDs can be compromised and used to steal data, we will start revoking access to client IDs that have not been used for at least 1 year.
- Enforcement will begin on February 1, 2024. Client IDs that were created before 2023 and never used during 2023 will have access to APIs revoked.
- We will revoke access to inactive client IDs at the beginning of each month if the ID is more than 12 months old and has not been used for 12 months.
- Account owners will receive an email 2 weeks prior to access being revoked with additional details. If the client ID gets used before the next month, then access will not be revoked.
How to keep a client ID active
A client ID is considered active if it makes any request to an API hosted on our platform and contains a valid authentication token.
These APIs have URLs beginning with api.cat.com, services.cat.com, mtls.services.cat.com, or api.catdevservices.com.
Lost access?
If you find that your client ID has been revoked, you can request access again by using the ‘Subscribe’ button on the API product page in the Cat Digital Marketplace.