API Access in Group and Professional Editions

API access is not normally supported in GE/PE organizations. However, once your app passes the security review, you’re eligible to use some APIs for building composite applications.

• Currently, the standard Data SOAP and REST APIs are supported for GE and PE apps, and Metadata API is supported in PE apps. To request API access, see How do I get an API token for my app? Also, you can contact Salesforce to request that a connected app be whitelisted to use the REST API in GE or PE organizations.
• Other APIs, such as the Bulk API and Apex Methods exposed using the SOAP Web service, remain unavailable.
• REST based Web services can be enabled by connected app consumer whitelisting
• SOAP-based Web services, including Metadata API, can be enabled using an API token called a Client ID, which needs to be appended to your SOAP headers in integration calls. This special key enables your app to successfully make calls to GE/PE organizations for Data API and PE organizations for Metadata API, even if the customer does not have API access.

The Client ID has these properties.

1. You can’t use the Client ID with the AJAX Toolkit in custom JavaScript, S-controls, or anywhere in your app where its value would be exposed to the end customer.
2. For development purposes, GE/PE organizations created via the Environment Hub already have the Metadata API and SOAP API (Data API) enabled. This allows you to develop and test your app before the security review. After your app passes the security review and you obtain an API token, test your app again to ensure it is working correctly.
3. The Client ID grants GE/PE access to the SOAP API, and PE access to the Metadata API. The Metadata API allows you to dynamically create various components you typically create in Setup. For instance, you can create a custom field dynamically in a PE organization with the API token.