Environments & Authorization
Demo / Integration environment
This environment can be used to develop and test your integration to our platform. This environment has a limited supply of products. Apart from this the API behaves similar to our production environment.
Production environment
The live environment, where bookings are real. Once your integration is certified, you receive a separate key for production.
Authorization
Every request carries your API key in the Authorization HTTP header: the word ApiKey, one space, and the key exactly as you received it during onboarding.
Authorization: ApiKey <your API key>
ApiKeyis the only scheme the API accepts, and it is case-sensitive (ApiKey, notapikeyorBearer).- A key belongs to one environment. A demo key does not work on production, and a production key does not work on demo.
- A key does not expire. If it is lost or exposed, we revoke it and issue a new one; contact support@apixv.com.
A request that is not accepted is rejected with HTTP 401 Unauthorized; the detail field says why:
detail |
Meaning |
|---|---|
Not authenticated: send Authorization: ApiKey <your API key> |
The header is missing or uses another scheme. |
Invalid API Key |
The key is unknown, damaged or belongs to another environment. |
API key revoked |
The key was revoked; use the replacement key. |
Keep your key secret: call the API only from your servers, never from a browser or a mobile app, and do not put it in URLs or logs.