A location intelligence API turns coordinates, places, routes, business data, and spatial context into application-ready decisions and actions. The interface coordinates geospatial services with ranking, inference, business rules, and analytics so a product can answer which location fits a request, which service area should respond, and which geographic pattern matters next.
Basic location services may convert an address into coordinates, find nearby places, calculate a route, or render a map. Location intelligence goes further by combining those spatial signals with context and product constraints, which is why the same stack that powers local discovery also supports store selection, field operations, and risk screening. The sections below define the category, separate it from adjacent mapping APIs, walk the core capabilities, and close with architecture, evaluation, and governance criteria a team can apply before buying or building.

What Is a Location Intelligence API?
A location intelligence API is a programmable interface that turns geospatial data and location context into application-ready results. The category is broader than one endpoint type: a complete implementation may combine geocoding and reverse geocoding, place and point-of-interest retrieval, spatial search and filtering, proximity and service-area logic, routing and travel-time analysis, ranking and recommendation, natural-language inference, map actions, business-data enrichment, and spatial analytics. Esri defines location intelligence as insight gained from visualizing and analyzing geospatial data, often by layering demographics, traffic, environmental conditions, economics, and weather. The Open Geospatial Consortium separately defines standards for creating, modifying, and querying geographic features through web APIs, which illustrate the data-access foundation on which higher-level intelligence can be built.
The practical difference is the output. A conventional location service might answer that the coordinates are 38.8977, -77.0365. A location-intelligence layer might answer that a clinic is the closest eligible service location for the current user, that the clinic sits inside the permitted operating area, that estimated travel time is 12 minutes, and that two alternatives should rank lower because they lack a required capability. The second result needs coordinates, spatial relationships, business rules, ranking, and context—not geocoding alone.
How Does a Location Intelligence API Differ From Mapping APIs?
Location technology is usually assembled from several API categories whose names overlap while their responsibilities differ. Mapping and rendering APIs display map tiles, styles, cameras, markers, and polygons. Geocoding APIs convert addresses into coordinates or coordinates into addresses. Place-search APIs return named places, businesses, landmarks, or category matches. Routing APIs calculate paths, travel times, distances, and turn-by-turn steps. Spatial-data APIs query geographic features and properties, while spatial-analytics APIs measure relationships, clusters, coverage, or patterns. A location intelligence API sits above those layers: the interface combines spatial services, context, ranking, inference, and business logic into decision-ready places, actions, explanations, rankings, and signals.
| API category | Primary job | Typical output |
|---|---|---|
| Mapping or rendering API | Display a map and interactive layers | Map tiles, style, camera, markers, polygons |
| Geocoding API | Convert an address or place description into coordinates, or coordinates into an address | Latitude, longitude, formatted address, place identifier |
| Place search API | Find named places, businesses, landmarks, or categories | Candidate places and attributes |
| Routing API | Calculate paths, travel times, distances, and instructions | Route geometry, duration, distance, steps |
| Spatial data API | Query geographic features and properties | Features, geometries, collections, metadata |
| Spatial analytics API | Measure relationships, clusters, coverage, or patterns | Aggregations, scores, areas, statistics |
| Location intelligence API | Combine spatial services, context, ranking, inference, and business logic | Decision-ready places, actions, explanations, rankings, and signals |
Google's Geocoding API documentation describes geocoding as converting addresses into coordinates and reverse geocoding as converting coordinates into a human-readable address. Mapbox similarly separates geocoding, directions, maps, navigation, and other service families. Those capabilities remain essential, but a higher-level product still has to decide which services to call, how to combine results, which business rules to enforce, and which outcome to present. A location intelligence API can coordinate that work without necessarily replacing the underlying mapping, search, routing, or data providers.
What Capabilities Does a Location Intelligence API Provide?
A useful location intelligence API generally performs seven related jobs: resolve, enrich, rank, infer, act, measure, and govern. Resolution identifies the geographic subject of a request by converting an address to coordinates, matching a business name to a stable place, interpreting an area such as "near downtown," disambiguating cities with the same name, reading the current map extent, or recognizing that "near me" depends on authorized device location. Resolution should produce stable geographic objects rather than leave important places as unstructured text. GeoJSON is a common interchange format for those objects; RFC 7946 defines GeoJSON objects for geographic features, their properties, and spatial extents using JSON.

Enrichment connects coordinates to attributes such as category, address, service availability, opening status, administrative area, nearby transit, travel time, demographic or environmental context, ownership or tenant information, and inventory or operational status. The authoritative source depends on the attribute: a public place provider may be appropriate for an address, while an internal system must remain authoritative for inventory, eligibility, pricing, staffing, or account-specific access. Ranking then turns a raw list of nearby places into a product-relevant order by accounting for distance, travel time, category match, availability, user preferences, operating area, business priority, freshness, confidence, popularity, accessibility, or a product-specific score. "Nearest" is one ranking rule; "best fit for this request under these constraints" is location intelligence.
Inference converts natural-language or application context into spatial intent. A user might ask which properties are close to transit and a grocery store, which clinics inside a service area accept walk-ins, which stores can fulfill an order before 5 p.m., where to place a client meeting halfway between offices, or which assets are most exposed to a forecast flood zone. The inference layer identifies entities, constraints, geography, and requested actions, and the result still has to be validated against source systems. Action generation then returns structured map and workflow operations rather than prose alone: fit the map to a result area, place or remove markers, highlight a polygon, draw a route, filter a dataset, open a place detail, hand off a destination to navigation, trigger a business workflow, or request human confirmation.
Measurement closes the loop. Useful events include location questions submitted, resolved places returned, no-result outcomes, map actions applied, routes requested, results selected, recommendations accepted, areas filtered, maps shared, and workflows completed. Spatial analytics can reveal where demand occurs, which regions produce no results, which recommendations convert, and where the underlying data fails users. Governance sits beside every other capability: authorization, tenant isolation, source attribution, retention, and quotas keep the same intelligence layer from becoming an unauthorized data path.
Kaleidr's current Platform API documents streaming chat endpoints, place enrichment, route creation, design analysis, style catalogs, and design-application routes. The browser SDK can attach AI chat, a viewer, an editor, or designed basemap tiles to an application. See the Kaleidr endpoint reference and developer documentation. For conversational map patterns that consume these capabilities in a host UI, see Adding an AI Chat Assistant to an Interactive Map and How to Add AI Chat to a Map.
How Does the Architecture Work?
A location intelligence API sits between product intent and spatial services. The user or calling system expresses a question, request, event, or business decision. The host application owns the interface, identity, tenant context, permissions, workflow, and final action. The intelligence layer interprets intent, selects capabilities, combines evidence, ranks results, and returns structured actions. Geospatial services supply geocoding, place search, routing, map data, terrain, imagery, or feature queries. Business systems remain authoritative for inventory, customers, assets, eligibility, prices, properties, and operations. The map or product surface presents results through maps, lists, dashboards, chat, alerts, or automated workflows, while the analytics layer records usage, outcome, geography, quality, and business impact.

| Layer | Responsibility |
|---|---|
| User or calling system | Expresses a question, request, event, or business decision |
| Host application | Owns interface, identity, tenant context, permissions, workflow, and final action |
| Intelligence layer | Interprets intent, selects capabilities, combines evidence, ranks results, and returns structured actions |
| Spatial services | Geocoding, place search, routing, map data, terrain, imagery, or feature queries |
| Business systems | Authoritative inventory, customers, assets, eligibility, prices, properties, and operations |
| Map or product surface | Presents results through maps, lists, dashboards, chat, alerts, or automated workflows |
| Analytics layer | Records usage, outcome, geography, quality, and business impact |
The architecture should preserve ownership boundaries. The host application owns the user and business workflow. Spatial providers own the data and services covered by their contracts. The intelligence layer interprets and coordinates. Business systems remain authoritative for private operational facts. The interface shows the result and provides recovery when the answer is incomplete. The W3C and OGC Spatial Data on the Web Best Practices emphasize using web architecture and clear spatial-data practices to improve discoverability, accessibility, interoperability, and reuse. Those principles remain relevant even when a language model sits above the data.
What Does a Location Intelligence Request Look Like?
A product-facing location request often contains more than a search string. The following JSON is conceptual rather than a current Kaleidr endpoint contract:
{
"query": "Find eligible clinics within 20 minutes that accept walk-ins",
"origin": {
"type": "Point",
"coordinates": [-77.0365, 38.8977]
},
"constraints": {
"max_travel_minutes": 20,
"walk_in": true,
"tenant_id": "tenant_123"
},
"context": {
"language": "en",
"map_zoom": 11
}
}
A decision-ready response might contain stable identifiers, geometries, eligibility flags, scores, reasons, allowed actions, and source labels:
{
"results": [
{
"id": "clinic_482",
"geometry": {
"type": "Point",
"coordinates": [-77.021, 38.91]
},
"travel_minutes": 14,
"eligible": true,
"score": 0.91,
"reasons": [
"Inside service area",
"Walk-ins accepted",
"Open during requested period"
]
}
],
"actions": [
{
"type": "fit_bounds",
"result_ids": ["clinic_482"]
}
],
"sources": [
"authorized_clinic_directory",
"approved_routing_service"
]
}
The exact schema will vary by product. The important design requirement is that the application receives stable identifiers, geometries, reasons, sources, and allowed actions—not an unsupported paragraph that must be parsed after the fact.
How Does Kaleidr Expose Spatial Intelligence?
Kaleidr positions its Enterprise product as location-intelligence infrastructure with inference APIs, ranking systems, analytics, deployment support, and scalable APIs for location-aware product stacks. The current developer platform separates capabilities into three scopes: ai for chat, inference, and retrieval; maps for designed basemaps and tiles; and design for editor and design routes. A platform key belongs to an organization and comes in two runtime forms: a publishable browser key, exchanged by the SDK for a short-lived, origin-bound session; and a server key, sent from the backend as a bearer credential. The Kaleidr authentication documentation states that server keys are browser-blocked through CORS and publishable keys must be used through the SDK rather than sent as raw bearer credentials.
A backend can call the documented chat stream directly:
curl -N https://api.kaleidr.com/inference-api/b2b/v1/chat/control/stream \
-H "X-Api-Key: YOUR_SERVER_API_KEY" \
-H "Content-Type: application/json" \
-H "Accept: text/event-stream" \
-d '{
"messages": [
{
"role": "user",
"content": "cafes near the Louvre"
}
]
}'
The example above follows the current Kaleidr endpoint documentation. Use a server key only from a backend. Browser applications should use a publishable key through kaleidr.js or <kaleidr-map>.
Where Do Teams Apply Location Intelligence?
Local discovery and recommendation products can interpret intent, retrieve candidate places, rank them, and show the reasons behind the result—the same pipeline described in Kaleidr's guide to AI-powered local business discovery. Real-estate and property applications can combine listings with travel time, neighborhood context, nearby services, school or transit access, and user-defined preferences. Retail and store operations can select an eligible store based on inventory, service area, travel time, hours, capacity, and fulfillment rules. Mobility and delivery products can match requests to service zones, calculate routes, rank drivers or facilities, and monitor geographic gaps.
Asset and field operations teams can locate assets, detect which boundary contains an incident, prioritize nearby resources, and trigger the appropriate workflow. Risk and environmental intelligence workflows can compare assets with flood, fire, weather, climate, terrain, or other spatial layers, provided the source and time of each risk dataset remain explicit. SaaS and marketplace platforms can add location-aware search, conversational map interaction, embedded map creation, or branded spatial experiences without building every geospatial subsystem internally.
How Does a Location Intelligence API Differ From GIS?
A location intelligence API and a geographic information system overlap, but the two are not identical. A GIS commonly provides broad tools for data management, cartography, spatial analysis, editing, projection, and professional workflows. A location intelligence API exposes selected spatial capabilities to software through a programmable contract. A GIS may power the API, a spatial database may power the API, a collection of cloud services may power the API, or an AI orchestration layer may coordinate several APIs. Product teams should evaluate the actual contract, data, accuracy, latency, governance, and operational model rather than rely on the category name.
Use a GIS when analysts and specialists need a comprehensive spatial working environment. Use an API when a customer-facing or internal product needs repeatable spatial capabilities inside its own workflow. Many mature systems use both.
Should You Build, Buy, or Use a Hybrid Model?
The decision is not simply whether a team can write an endpoint. A production location-intelligence stack can require place and address data, geocoding, routing, spatial indexing, feature storage, data normalization, entity resolution, ranking, natural-language interpretation, source attribution, map rendering, caching, usage metering, observability, privacy controls, regional deployment, and ongoing data maintenance.

Build internally when the spatial logic is the company's core intellectual property, the organization has strong geospatial engineering capacity, source data is unique and cannot be delegated, performance or deployment requirements are highly specialized, and the team can operate the data and inference systems over time. Buy or partner when speed to market matters, the required capabilities are common but operationally complex, the team wants one access model across AI, maps, and design, the organization lacks geospatial infrastructure specialists, usage and support need contractual terms, or the product benefits from a maintained SDK and platform API. Use a hybrid model when internal systems own business facts and eligibility, an external provider supplies geocoding, routing, maps, or place data, a spatial-intelligence platform coordinates inference and interaction, and the host application controls the final decision. Hybrid architecture is common because business context and commodity geospatial services have different ownership and maintenance profiles.
How Should You Evaluate a Location Intelligence API?
Capability fit comes first. Confirm which functions are actually available—forward and reverse geocoding, place search, spatial filters, routing, ranking, inference, map actions, tiles or rendering, analytics, and design or editor workflows—and do not assume one label implies all functions. Data provenance and freshness questions follow: which source supplies each attribute, how often the data updates, whether stable place identifiers are available, whether results can cite or expose their sources, how duplicates and conflicting records are handled, and which terms govern storage and reuse.
Prefer stable, documented schemas over prose-only responses. Look for stable IDs, coordinates and geometry, confidence, reasons, source references, timestamps, action types, and explicit error objects. OGC API standards provide one framework for interoperable access to geographic features, while GeoJSON provides a standard JSON-based representation for feature geometry and properties. Security evaluation should cover browser versus server credentials, origin and IP restrictions, object-level authorization, tenant isolation, key rotation and revocation, scope restrictions, audit logs, retention, CORS behavior, and sensitive-field handling. The OWASP API Security Top 10 identifies broken object-level authorization as a leading API risk. Every request that retrieves an object by a user-controlled identifier should enforce authorization at the object level.
Reliability measures include latency by endpoint and region, timeout behavior, streaming interruption, retry rules, quota enforcement, concurrency limits, status transparency, and SLA and support options. Kaleidr currently meters platform usage per organization rather than per key. The documented API returns 429 for exceeded monthly quota or concurrency limits, and streaming endpoints can surface quota information during a stream; see quota and rate limits. Developer experience review should cover exact endpoint documentation, versioning, examples, SDK support, OpenAPI or machine-readable descriptions, error semantics, a test environment, a changelog, and a migration policy. The OpenAPI Specification provides a language-agnostic description for HTTP APIs and supports documentation, client generation, testing, and tooling. Even when a provider does not publish a complete OpenAPI document, a precise contract and versioning policy reduce integration risk.
Commercial evaluation should clarify what unit is metered, whether usage pools are organization-wide, whether AI, maps, routing, and tiles are billed separately, concurrency limits, overage behavior, contract minimums, support tier, data-egress cost, and provider pass-through costs. Kaleidr's current pricing lists Pro at $29 per month with developer API access, publishable and server keys, embed support, and an organization usage pool. Enterprise pricing is custom and includes custom usage, contracts, SLA, dedicated support, and independent CDN options. Pricing was reviewed on 24 July 2026 and should be rechecked before purchase.
How Should Private Location Data Be Governed?
Location can become sensitive even when no individual field appears sensitive by itself. Repeated coordinates, movement history, home and work patterns, service usage, property data, or customer addresses can reveal identity and behavior. A production design should define collection purpose, consent or other legal basis, retention, precision reduction, tenant isolation, regional storage, access roles, auditability, deletion, incident handling, and model and provider boundaries. Do not send an entire customer or operational database to an inference service by default. Retrieve the minimum permitted records after authorization, pass only the fields required for the task, and keep the final business action inside the host application's policy layer. A location intelligence API should help a product make a permitted decision. The interface should not become a way to bypass the product's authorization model.
Which Events and Metrics Matter?
The following event names are editorial recommendations, not claims about automatically emitted Kaleidr Analytics events:
location_request_submitted
location_intent_resolved
location_candidates_returned
location_no_result
location_result_selected
location_action_applied
route_requested
service_area_matched
location_api_error
location_api_quota_reached
location_workflow_completed
Useful quality and business metrics include intent-resolution rate, place-resolution success rate, no-result rate, duplicate-result rate, median and tail latency, ranking acceptance rate, route or action completion, source coverage, geographic coverage gaps, cost per completed workflow, conversion by region, and repeat usage among activated accounts. The correct north-star metric is rarely "API calls." Measure the business or user task completed through the API.
What Mistakes Should Teams Avoid?
| Mistake | What happens | Recommended correction |
|---|---|---|
| Treating coordinates as complete intelligence | The product ignores context, constraints, and business eligibility | Combine geometry with authoritative attributes and explicit ranking rules |
| Parsing place names from prose | Results become brittle and difficult to validate | Use structured place objects with stable IDs and geometries |
| Trusting nearest as best | The closest result may be unavailable or irrelevant | Rank against the full product objective |
| Mixing public and private facts | Users cannot tell which system is authoritative | Label sources and preserve ownership boundaries |
| Sending server keys to the browser | A backend bearer becomes public | Use browser-safe publishable credentials or a host backend |
| Skipping object-level authorization | Users may retrieve another tenant's records | Authorize every object and spatial query in tenant context |
| Ignoring coordinate order | Points appear in the wrong region | Follow the selected format; GeoJSON uses longitude, latitude order |
| Hiding quota behavior | Production traffic fails unexpectedly | Monitor usage and handle 429 conditions explicitly |
| Measuring calls instead of outcomes | High usage is mistaken for product value | Track completed decisions and workflows |
| Treating one provider as the source of every fact | Data quality and licensing become unclear | Assign an authoritative source to each attribute |
Final Evaluation Checklist
- User decision or workflow clearly defined
- Required spatial capabilities listed
- Source for each data attribute identified
- Stable place or feature identifiers available
- Geometry format and coordinate order confirmed
- Ranking logic documented
- Inference separated from factual validation
- Browser and server credentials separated
- Object-level and tenant authorization implemented
- Structured errors and empty states handled
- Quota and concurrency behavior tested
- Latency measured under realistic geography and load
- Data retention and regional requirements reviewed
- Analytics tied to completed workflows
- Provider terms and pass-through costs reviewed
- Versioning and migration policy reviewed
- Real user queries tested
- Human escalation defined for high-impact decisions
Final Verdict
A location intelligence API is not merely a map endpoint. The programmable layer turns places, coordinates, routes, geographic features, business data, and user intent into a structured decision or action. Geocoding answers where an address is. Place search returns candidates. Routing estimates how to move between locations. Rendering displays the result. Location intelligence coordinates those capabilities with ranking, inference, business rules, and analytics.
The right architecture preserves clear boundaries: the host product owns the workflow and authorization, source systems own factual data, spatial providers deliver their contracted services, and the intelligence layer interprets context and returns structured results. Teams should build internally when the spatial logic is core intellectual property, buy when maintained infrastructure accelerates a standard capability, and use a hybrid model when private business context must remain inside the host system.
Build Location Intelligence Into Your Product
Use Kaleidr's inference APIs, ranking systems, analytics, SDK, and map products to add location-aware capabilities without replacing the rest of your application stack. Explore the Enterprise offering for deployment terms, usage contracts, and spatial-intelligence infrastructure designed for host products that retain their own workflow and authorization model.
Review the Platform API
Read the authentication, scopes, endpoint, quota, error, and SDK documentation before selecting the integration path. The developer docs are the authoritative contract for keys, streaming chat, and map products.
Read the Developer Documentation
FAQs
What is a location intelligence API?
A location intelligence API is a programmable interface that combines geospatial data, location services, context, ranking, business rules, and sometimes AI inference to return decision-ready places, actions, or spatial insights. The interface sits above individual geocoding, place-search, routing, or mapping endpoints and coordinates them for a product workflow.
How is a location intelligence API different from a geocoding API?
A geocoding API primarily converts addresses or place descriptions into coordinates and can reverse coordinates into addresses. A location intelligence API may use geocoding but also adds context, enrichment, ranking, spatial relationships, business constraints, and application actions so the product receives a decision-ready result rather than coordinates alone.
Is a mapping API the same as a location intelligence API?
No. A mapping API renders the visual map and map layers. A location intelligence API helps determine what the application should show or do based on geography and context. One product may bundle both capabilities, but the responsibilities remain distinct.
What data formats do location intelligence APIs use?
JSON is common. GeoJSON is a standardized JSON-based format for geographic features and geometry. Some APIs also use vector tiles, encoded polylines, protocol buffers, CSV, KML, or provider-specific schemas. Prefer documented schemas with stable identifiers over prose-only responses.
What can a location intelligence API do for a business?
Common applications include local discovery, real-estate search, store selection, service-area matching, routing, asset operations, risk analysis, territory planning, personalized recommendations, and embedded map experiences. The value appears when geography changes a product decision, not merely when a map is displayed.
Does a location intelligence API require AI?
No. Location intelligence can be built with deterministic spatial analysis, business rules, ranking, and data enrichment. AI becomes useful when the product must interpret natural language, combine flexible constraints, generate explanations, or coordinate complex actions. The factual validation layer should remain separate from inference in either case.
Can a location intelligence API use private business data?
Yes, when the implementation includes explicit authorization, tenant isolation, controlled retrieval, source ownership, retention rules, and auditability. Private data should remain governed by the host organization rather than being exposed indiscriminately to an inference layer.
Should a location intelligence API return prose or structured data?
A production API should return structured data for places, geometries, identifiers, scores, sources, actions, and errors. Prose can improve the user experience, but the application should not have to parse critical spatial facts from free-form text.
What security controls matter most?
Separate browser and server credentials, restrict origins or IPs, enforce object-level and tenant authorization, limit scopes, rotate keys, protect sensitive location history, define retention, and audit access to private records. Broken object-level authorization remains a leading API risk in the OWASP API Security Top 10.
How should a team measure a location intelligence API?
Measure successful resolutions, accepted rankings, completed map actions, workflow completion, latency, no-result rates, geographic coverage, cost per outcome, and downstream conversion. Request volume alone does not measure usefulness.
How does Kaleidr fit into a location intelligence stack?
Kaleidr provides spatial-intelligence infrastructure including AI chat and inference, place and retrieval workflows, ranking, designed maps and tiles, editor and viewer components, analytics, and enterprise deployment support. The host application retains responsibility for users, permissions, business rules, and authoritative private data.
References
- Esri. What is Location Intelligence? Accessed 24 July 2026. https://www.esri.com/en-us/location-intelligence/overview
- Google. Geocoding API overview. Google Maps Platform documentation. Accessed 24 July 2026. https://developers.google.com/maps/documentation/geocoding/guides-v3/overview
- IETF. RFC 7946: The GeoJSON Format. Accessed 24 July 2026. https://datatracker.ietf.org/doc/html/rfc7946
- Kaleidr. Auth & scopes. Kaleidr Developer Docs. Accessed 24 July 2026. https://docs.kaleidr.com/platform-api/auth-and-scopes
- Kaleidr. Endpoints. Kaleidr Developer Docs. Accessed 24 July 2026. https://docs.kaleidr.com/platform-api/endpoints
- Kaleidr. Errors. Kaleidr Developer Docs. Accessed 24 July 2026. https://docs.kaleidr.com/reference/errors
- Kaleidr. Get an API key. Kaleidr Developer Docs. Accessed 24 July 2026. https://docs.kaleidr.com/get-an-api-key
- Kaleidr. Introduction. Kaleidr Developer Docs. Accessed 24 July 2026. https://docs.kaleidr.com
- Kaleidr. Location Intelligence API & Spatial Infrastructure. kaleidr.com. Accessed 24 July 2026. https://kaleidr.com/enterprise
- Kaleidr. Pricing & Plans. kaleidr.com. Accessed 24 July 2026. https://kaleidr.com/pricing
- Kaleidr. Quota & rate limits. Kaleidr Developer Docs. Accessed 24 July 2026. https://docs.kaleidr.com/platform-api/quota-and-rate-limits
- Mapbox. API Docs. Accessed 24 July 2026. https://docs.mapbox.com/api/guides/
- Mapbox. Directions API. Accessed 24 July 2026. https://docs.mapbox.com/api/navigation/directions/
- Mapbox. Understanding the Geocoding API. Accessed 24 July 2026. https://docs.mapbox.com/help/dive-deeper/geocoding/
- OGC. OGC API – Features Standard. Accessed 24 July 2026. https://www.ogc.org/standards/ogcapi-features/
- OpenAPI Initiative. The OpenAPI Initiative. Accessed 24 July 2026. https://www.openapis.org/
- OWASP. OWASP Top 10 API Security Risks – 2023. Accessed 24 July 2026. https://owasp.org/API-Security/editions/2023/en/0x11-t10/
- W3C and OGC. Spatial Data on the Web Best Practices. Accessed 24 July 2026. https://www.w3.org/TR/sdw-bp/
@misc{esri_location_intelligence,
title = {What is Location Intelligence?},
author = {{Esri}},
note = {Accessed 24 July 2026},
url = {https://www.esri.com/en-us/location-intelligence/overview}
}
@misc{ogc_api_features,
title = {OGC API -- Features Standard},
author = {{Open Geospatial Consortium}},
note = {Accessed 24 July 2026},
url = {https://www.ogc.org/standards/ogcapi-features/}
}
@misc{ietf_geojson,
title = {RFC 7946: The GeoJSON Format},
author = {{Internet Engineering Task Force}},
note = {Accessed 24 July 2026},
url = {https://datatracker.ietf.org/doc/html/rfc7946}
}
@misc{kaleidr_endpoints,
title = {Endpoints},
author = {{Kaleidr}},
note = {Kaleidr Developer Docs; accessed 24 July 2026},
url = {https://docs.kaleidr.com/platform-api/endpoints}
}
@misc{kaleidr_auth_scopes,
title = {Auth \& scopes},
author = {{Kaleidr}},
note = {Kaleidr Developer Docs; accessed 24 July 2026},
url = {https://docs.kaleidr.com/platform-api/auth-and-scopes}
}
@misc{kaleidr_enterprise,
title = {Location Intelligence API \& Spatial Infrastructure},
author = {{Kaleidr}},
note = {Accessed 24 July 2026},
url = {https://kaleidr.com/enterprise}
}
@misc{owasp_api_security,
title = {OWASP Top 10 API Security Risks -- 2023},
author = {{OWASP}},
note = {Accessed 24 July 2026},
url = {https://owasp.org/API-Security/editions/2023/en/0x11-t10/}
}