It seems to be working for me using a token-based call. I'm using a LoadVars object to make the call and with the following request URL: http://api.msappspace.com/opensocial/v1/VIEWER/appdata.xml?opensocial_token=[user-token-here]&opensocial_mode=canvas&detailtype=BASIC&_method=PUT And...