booking.com

Sign in to the Affiliate Partner Centre with your managed affiliate partner account, then generate an API key token for your API user as described in the Demand API authentication guide. Copy it when shown; Booking.com only displays the full key once.

After your Booking.com managed affiliate partner account is enabled, open the Affiliate Partner Centre. The Demand API prerequisites say you generate or obtain your X-Affiliate-Id in Partner Centre alongside the API key token.

First create a machine account with Client ID and Client Secret in the Connectivity Portal. Then exchange them at https://connectivity-authentication.booking.com/token-based-authentication/exchange as documented in the token-based authentication guide. The returned JWT access token is valid for one hour.

Create or manage a machine account in the Connectivity Portal. The credential-based authentication guide says requests can use HTTP Basic auth with the machine account username and password in the Authorization header. This method is scheduled to sunset on 31 Dec 2025.

Register your business application using the Data Portability API registration form. The authentication guide states registration is required to obtain the client_id and client_secret used with Booking.com Accounts Portal OAuth.

First obtain a metasearch API key via your Booking.com account manager as described in the Metasearch authentication guide. Then POST the API key as form field api_key to https://metasearch-connect-api.booking.com/auth to receive a short-lived access_token, which you send as Authorization: Bearer <token> to the API.