API Access in Group and Professional Editions

API access is not normally supported in GE/PE organizations. However, once your app passes the security review, you’re eligible to use some APIs for building composite applications.

• Currently, only the standard SOAP and REST APIs are supported for GE and PE apps. You can also request that a connected app be whitelisted to use the REST API in GE or PE organizations.
• Other APIs such as the Metadata API, Bulk API, and Apex Methods exposed using the SOAP Web service remain unavailable.
• REST based Web services can be enabled by connected app consumer whitelisting
• SOAP based Web services can be enabled using an API token called a Client ID, which needs to be appended to your SOAP headers in integration calls. This special key enables your app to successfully make calls to GE/PE even if the customer does not have API access.

The Client ID has these properties.

1. You can’t use the Client ID with the AJAX Toolkit in custom JavaScript, S-controls, or anywhere in your app where its value would be exposed to the end customer.
2. For development purposes, GE/PE organizations created via the Partner Portal don’t need the Client ID.
3. The Client ID will only grant GE/PE access to the SOAP API, not the Metadata API. The Metadata API allows you to dynamically create various components you typically create in Setup. For instance, creating a custom field dynamically is not possible in GE/PE even with the API Token.