Generate Admin Token



At 10.1 and later, the generateToken operation is not supported by the REST API admin. Use the generateToken operation supported by the ArcGIS Server Admin API instead.

The Generate Admin Token operation generates a security token that can be used by clients when working with the Admin API. The ArcGIS Server Administrator is secured so that only users that have ADMINISTER or PUBLISH privileges have permissions to access the admin.

The token generated by this operation needs to be specified using the token parameter when accessing the Admin. Example: http://<admin-url>/system/handlers/rest/cache/clear?token=<token>

Request parameters




Description: The response format. The default response format is html.

Values: html | json


Description: The admin username. This user must be a member of the ArcGIS Server administrators group.


Description: The admin password.


Description: The client IP or HTTP referer for which the token is to be generated.

  • If the value is specified as ip, the ip parameter must be specified.
  • If the value is specified as requestip (request IP), the token is generated for the IP from where the request originated.
  • If the value is specified as referer, the referer parameter must be specified.

The default value is referer.

Values: referer | ip | requestip


Description: The base URL of the web app that will invoke the Admin API. This parameter must be specified if the value of the client parameter is referer.

Example: referer=http://myserver/mywebapp


Description: The IP address of the machine that will invoke the Admin API. This parameter must be specified if the value of the client parameter is ip.

Example: ip=###.###.###.###


Description: The token expiration time in minutes. The default is 60 minutes. Tokens can be generated up to a maximum expiry of 1 year (525600 minutes).

Example: expiration=43200 (1 month)

JSON response syntax

  "token": "<token>",
  "expires": <expires> //the time (in milliseconds from epoch) when this token will expire

JSON response example

  "token": "G6943LMReKj_kqdAVrAiPbpRloAfE1fqp0eVAJ-IChQcV-kv3gW-gBAzWztBEdFY",
  "expires": 1255466350163