Chat with our AI Assistant to get instant answers on APIs, troubleshooting, and integration steps.
Ask ✨
Ctrlk
Sandbox LoginPartner ContactsBecome a SiteMinder Partner
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Integration Requirements

Understand what your integration must implement before connecting to production.

These requirements define the technical standards your integration must meet to work correctly with the Direct Booking API. Work through each section during your build — not after.

The API supports two integration types:

  • Hotel groups — available to groups on Multi-property with the SiteMinder Platform. Group-level API keys give access to all properties within the group.

  • Individual properties — available to independent properties on the SiteMinder Platform. Property-level API keys give access to a single property only.

Limitations

Groups and individual properties on the classic version of the SiteMinder Channel Manager will not be able to access the Direct Booking API.

Authentication

Every request must include a valid API key passed in the x-sm-api-key header. Two types of API keys are supported:

  • Group-level key — generated in MP Extranet → Direct Booking → API tab. Gives access to all properties in the group.

  • Property-level key — generated in Platform → Direct Booking → Configuration → API Integration. Gives access to a single property only.

The endpoints behave the same way regardless of key type, with one exception: GET /properties is only available to group-level keys.

The key determines which properties are accessible. It must never be exposed in query parameters or client-side.

Intended Use

This API is intended to be used for server-to-server communications only. It is not intended to be used from a front-end web page as this will expose your secret key to the public and may also allow the API keys' rate limit to be exceeded and prevent API access.

Rate Limit

Each key is limited to 100 API calls per minute. Your integration must handle 429 responses with exponential backoff. Do not retry immediately, wait until the next minute.

Pagination

Responses from list endpoints are paginated. Your integration must not assume all results are returned in a single response.

  • Iterate through pages using the page parameter.

  • Continue until page equals totalPages.

  • Default page size is 10, adjust using perPage.

Stay Length Limit

Availability queries via /quotes must not exceed 31 days per request. Split longer date ranges across multiple requests.

Error Handling

Your integration must handle all error responses gracefully. Do not surface raw API error messages to guests.

Data Freshness

The data is kept up to date as inventory is booked and changes are made to your configuration in Direct Booking. Avoid caching responses for extended periods to prevent stale availability being shown to guests.

sparkles

Still have questions?

Use the Ask button at the top of the page to chat with our AI assistant — it can help you navigate the guide, understand requirements, and troubleshoot issues.

If you need more support, visit Integration Support.

Last updated

Was this helpful?