Skip to main content
The API uses a dedicated public key header:
Treat the public key as an opaque value.

Channels and scope

A distribution channel is a sales context, such as a hotel’s own website or SpaBooking. A channel can have several named public keys, and each key belongs to exactly one channel. A key scopes requests to the active companies connected to its channel; one key can cover more than one company. A company’s own website is its direct sales channel, as opposed to a reseller such as SpaBooking. Website-only content, such as a visit type’s channelContent.collections, is returned only to keys of that channel, and only while the company has a single direct channel. You receive only the hotels, room types, and visit types of the companies in this scope. Promotions and their effect on prices depend on the requesting channel. A response for one key must not be reused for another key. Partition your cache by key, and put a hash of the key, never the key itself, into any public cache identifier.

Getting your public key

SpaPortal issues public keys per channel. To get one, write to info@spabooking.de with the name of the company and the website or sales channel you are integrating.

Authentication errors

Authentication runs before input validation. A request with both a missing key and invalid parameters returns the authentication error.