The API Report CardAPI Index
THE API REPORT CARD / Hospitality & Travel / Booking.com
Booking.com

Booking.com API

Online Travel Agency / Lodging Distribution / Two-sided Travel Marketplace · booking.com

Two documented REST surfaces exist, both gated: the Demand API for approved affiliate partners and Connectivity APIs for PMS and channel managers. There is no self-serve tier, no anonymous sandbox, and new connectivity-partner onboarding is paused while terms are rewritten.

Last verified: July 2026Hospitality & Travel
API GRADE
C
VERIFIED JUL 2026

SCORECARD

ExistenceGOODTwo real REST surfaces at developers.booking.com, Demand API with OpenAPI v3 and Connectivity APIs; the gate is access, not existence.
AccessPOORNo self-serve or anonymous tier: Demand requires Managed Affiliate Partner approval and new Connectivity onboarding is paused.
CoverageMIXEDDemand spans search to orders across stays, cars, flights, and attractions; no public webhooks, no consumer surface.
AuthMIXEDStatic API keys with an X-Affiliate-Id header on Demand; Connectivity uses machine-account credentials over TLS 1.2.
Docs & DXMIXEDDocs and an OpenAPI v3 spec are public, but the sandbox console is approved-partners only; no anonymous test credentials.
StabilityMIXEDOnboarding of new connectivity providers is paused while terms are rewritten; per-endpoint limits surface in integration.
MORE FROM THE REPORT CARD
TrivagoB+TripAdvisorAAgilysysFAirbnb ExperiencesC+
Supergood: Booking.com has an API, with gaps. We cover what it's missing: stable endpoints, normalized JSON, managed auth.

Frequently asked questions

Booking.com scores C on the API Report Card. Two documented REST surfaces exist, both gated: the Demand API for approved affiliate partners and Connectivity APIs for PMS and channel managers. There is no self-serve tier, no anonymous sandbox, and new connectivity-partner onboarding is paused while terms are rewritten.

Tried to integrate with Booking.com?
SOURCES
Connectivity API onboarding is currently paused for new partners 'until further notice' while terms are updated, a multi-quarter freeze for new PMS/channel-manager entrants elfsight.com ↗
Demand API requires becoming an approved Managed Affiliate Partner before any credentials are issued; independent developers cannot evaluate the API without business-relationship approval developers.booking.com ↗
Demand API hard rate limit of 50 requests/minute is restrictive for any partner doing real-time search or cache warming at scale; HTTP 429 with no documented burst allowance developers.booking.com ↗
Connectivity API rate limits are tiered and undocumented per-endpoint in public form, partners discover them on integration and have no public SLA developers.booking.com ↗
No public sandbox / no anonymous test credentials, must be an approved partner before any hands-on evaluation developers.booking.com ↗
Aggressive anti-bot stack (Akamai Bot Manager, CAPTCHAs, dynamic rendering, IP rate limiting) blocks scraping within 10–20 requests from datacenter IPs, forcing partners and price-monitoring tools toward the gated APIs or paid third-party scrapers scrapfly.io ↗
Third-party reverse-engineered 'Booking.com APIs' (Apify, ScrapFly, ScraperAPI, Scrapingdog) exist as the unofficial public API; these break without notice and violate Booking ToS apify.com ↗
Connectivity Partner requirements include PCI + PII compliance, real-time reservation handling, year-ahead rates/availability, and region-specific minimum property counts, high bar for new entrants altexsoft.com ↗
2023 Extranet account-compromise wave used the legitimate Connectivity messaging channel to phish guests, partners were affected by Booking's auth model and slow 2FA rollout bbc.com ↗
Cancellation and refund disputes are the most common consumer complaint, guests report Booking refusing refunds for non-refundable rates even in extenuating circumstances, blaming the hotel; hotels blame Booking consumeraffairs.com ↗
Trustpilot rating sits around 1.3/5 from ~50k+ reviews, with recurring themes of bait-and-switch pricing, mis-listed properties, and unresponsive customer support trustpilot.com ↗
Hoteliers complain about 15%+ commission and aggressive rate-parity / 'best price guarantee' enforcement that punishes properties for offering better rates on their own websites, a long-running antitrust flashpoint in the EU altexsoft.com ↗
Booking.com was designated a 'gatekeeper' under the EU Digital Markets Act in May 2024, forcing changes to rate parity and self-preferencing rules digital-markets-act.ec.europa.eu ↗
Massive 2023 phishing/payment-fraud wave: criminals compromised hotelier Extranet accounts and used the legitimate Booking messaging channel to defraud guests; Booking was criticized for slow response and limited 2FA enforcement bbc.com ↗
Independent hoteliers report opaque ranking algorithm, 'Visibility Booster' upsells, and that opting out of Genius/discount programs materially demotes the property in search lighthousehmc.com ↗
Guests report being charged in unexpected currencies and FX markups despite booking in local currency consumeraffairs.com ↗
'Mystery' bookings being canceled by the property after the fact, with Booking caught in the middle and forced rebookings at higher rates trustpilot.com ↗
Repeated criticism that Booking customer service is offshore-outsourced, scripted, and unable to escalate edge cases consumeraffairs.com ↗
© Supergood Systems, Inc.