On 29th May 2017 the /search /tracks /albums /artists and /users (and related) endpoints will start requiring an access token, bringing them in-line with all other Web API endpoints. A detailed overview of the changes [can be found here.](https://developer.spotify.com/migration-guide-for-unauthenticated-web-api-calls/)

Part of maintaining a large scale API is ensuring we are able to properly monitor how our product is consumed both globally, and on a per-app basis. Over time this information has proven invaluable when working with partners to optimise their experiences, and we’ve spent some time creating internal tooling to visualise that data for fast and easy insights.

We will soon be releasing the ability for users to revoke account access for applications for which they have previously granted access. If you have written an app which uses the OAuth “Authorization Code” or “Implicit Grant” flows, you should make sure that you app is ready.

On Wednesday 29th June we will release an update for all client IDs to enable your application to read which scopes have been granted by the user when requesting or refreshing access tokens.