Quick Start

Everything you need to begin building with Direct Booking API.

This guide walks you through generating your API key, making your first request, and understanding the responses you'll receive. By the end you'll have a working call returning live property data.

Get your API key

API keys are generated in two places depending on your integration type:

• Group integration: Generate in MP Extranet under Direct Booking → API.

• Single property integration: Generate in Platform under Direct Booking → Configuration → API Integration. → Generate your API Key → Manage your API Key

Keys do not expire. Keep your key private — this API is for server-to-server use only.

API Specification File

REST (OpenAPI)

• Direct Booking — download YAML​

Make your first call

You'll need your API key before continuing.

1

Authenticate

Pass your key as a header on every call.

Header: x-sm-api-key: YOUR_API_KEY

2

Make the call

If you are using a group-level key: Your first call retrieves all properties in your group and returns the uuid you'll use in subsequent calls:

GET /properties

curl -X GET "https://directbooking.siteminder.com/public-api/api/properties" -H "x-sm-api-key: YOUR_API_KEY" -H "accept: application/json"

If you are using a property-level key: GET /properties is not available. You can get your property details using the following:

GET /properties/{propertyUuid}

Your property ID is shown on the API integration screen in Platform. Use it directly in subsequent calls:

GET /properties/{propertyUuid}/room-types
GET /properties/{propertyUuid}/room-rates
GET /properties/{propertyUuid}/quotes

3

Handle the response

The uuid is your property identifier — use it in subsequent calls for room types, room rates, and quotes.

{
   "page":1,
   "perPage":10,
   "total":50,
   "totalPages":5,
   "items":[
      {
         "uuid":"f63ce398-da03-4573-856d-ed8d71e57e3d",
         "name":"Demo Hotel"
      },
      "..."
   ]
}

4

Handle errors

If your key is missing or invalid:

{
   "error":"Unauthorized",
   "message":"Invalid API key"
}

401 - check your key is valid and passed in the x-sm-api-key header.

{
  "errors": [
    {
      "code": "RateLimited",
      "message": "You have exceeded the quota for the key, please try again later."
    }
  ]
}

429 - rate limit exceeded. Wait one minute before retrying.

→ See API Reference for the full error details.

Still have questions?

Use the Ask button at the top of the page to chat with our AI assistant — it can help you navigate the guide, understand requirements, and troubleshoot issues.

If you need more support, visit Integration Support.