REST Auth API: HTTP Requests

The REST API supports two mechanisms for authenticating access; basic authentication and OAuth 2.

Basic authentication - credentials

You can authenticate to the REST API to make requests by using HTTP basic authentication to convey your identity.

For example, if you want to explore the API using your web browser, you can navigate to https://{platform_name} , and your browser should prompt for your credentials to authorize access.

The username and password you should use are the same as those you activated your account with and use to log into the Management Platform. For production scenarios involving systems integration, we recommend a separate service user account is created for API operations that isn't shared with anyone else.

OAuth 2

Arlo supports the widely used OAuth 2.0 protocol to enable secure access to our API.

In order to use OAuth 2.0 with the REST API, you must first be registered and approved as an Arlo OAuth 2.0 client by registering via our developer portal. Once you have successfully registered and been approved, read this page for detail on employing oauth to access the rest api.


Before trying to authenticate, you must first ensure your account has been added to the API User and Administrator roles. Only users in both of these roles have unencumbered access to use the REST API.

If your identity is associated with only the Presenter and API User roles, certain limited access is allowed to the REST API.

Please consult the RBAC documentation for further details.