2
createrawtransaction is a bitcoin-cli command that generates a raw transaction given one ore more transaction ids and a list of Outputs, which are the destination amounts that will receive the funds.
AFAIK, The raw transaction is only based on the blockchain, and does not require any private key or address; the signing process is done separately, using signrawtransaction.
If the createrawtransaction process requires no secret keys, is there a way to generate a raw transaction online, using a web service?
createrawtransaction is not based on anything. It just converts the arguments you are passing to a hex transaction. It does not need a network connection, or the blockchain, or your wallet. There is even a standalone tool shipped with bitcoind (bitcoin-tx) that can do the same. Why do you need a webservice for it? – Pieter Wuille – 2016-11-13T17:20:46.367