Agency Portal — Step-by-Step User Manual

Travapi Agency API lets you search and book our hotel · tour · cruise inventory from your own system. You show search results to your customer on your own site/software and sell directly from us — your commission is applied automatically on every sale.

To use it you need an API key. You get this key from the portal at partner.travapi.com. This manual shows you how to use that portal from scratch.

What can you sell right now?

Hotel · Tour · Cruise are available now. Flights and Transfers are coming soon through the same API — you will sell the new products without changing your existing integration.

You are visiting the portal for the first time — you first need to submit a partnership application.

1. Open partner.travapi.com in your browser.
2. Click the Become a Partner button at the top right.
3. Fill in the form: Company name, Tax number, Contact person and Email are required. Tax office, phone and intended use are optional.
4. Click Submit application. Our team reviews your application.

Once your application is approved you receive an email — you create your password from it.

1. Check the email inbox you used in the application. (If it's not there, check spam/junk.)
2. Click the "Set password" link in the email.
3. On the screen that opens, type your new password twice and click Save password.
4. Your password is saved; you can now sign in.

Your account is ready — sign in to reach the panel.

1. Click the Sign in link at the top right of the home page.
2. Enter your email and the password you set.
3. Click Sign in. The system takes you straight to the API Access panel.

When you sign in you land on the API Access panel. All your key operations are here.

You see three things in the panel:

• Create sandbox key — instantly creates a test key.
• Request live access — requests a real sales key.
• Your API Keys table — lists all the keys you own.

The columns: Key (its id), Environment (sandbox/live), Status (active/revoked…), Created date and Action (revoke). For status meanings, see the Key statuses section.

Before going to real sales you try everything with a test key. This is the most important step.

1. Click the Create sandbox key button in the panel.
2. A window opens instantly containing an API Key and a Secret.
3. Copy both and store them somewhere safe. (The Copy button on each row helps.)
4. Click Close. Your key starts appearing in the table.

When your testing is done, you request a live key for real sales.

1. Click the Request live access button in the panel.
2. Your request goes to Woxx. After certification/approval your live key becomes active.
3. If you already have a pending or active live key, the system warns you (as shown below).

Your key is ready. Let's see it work — three simple steps: get a token → search → book.

The three requests below are the foundation of your integration. These examples use curl but you can do the same from any programming language.

1. Get a token: send API Key + Secret, receive a token valid for 1 hour.
2. Search hotels: put the token in the Authorization header and search; each hotel comes back with a rateKey.
3. Book: send a booking request with your chosen rateKey. In sandbox the response starts with SBX-… — no real reservation is created.

The Status column tells you what state each key is in:

To revoke a key, click Revoke in the Action column of that row and confirm.

Travapi Agency API is not just a search engine; it is end-to-end sales infrastructure. Once you have your key, here is what you get:

• 🧩 Developer-friendly kit: Swagger (interactive API docs), a Postman collection, sample requests/responses and documentation. Your dev team integrates within hours. (The /developers page in the portal is the first stop.)
• 🔔 Instant webhook notifications: when events such as cancellation/refund occur, a signed notification is sent to your system automatically — no constant polling needed.
• 🔄 Post-booking management: status lookup, cancellation and refund requests — all via the API. You are not left alone after the sale.
• 🖼️ Rich content: hotel photos, descriptions, amenities and destination data — ready content to build your own site completely.
• 🛠️ Two integration paths: integrate via the API in code, or sell from our ready-made B2B panel with no code at all. Pick what fits you.

• Never share the Secret. Email, message, screenshot — don't send it in the clear anywhere.
• Don't embed the Secret in a browser/mobile app. Make requests from your own server.
• Develop in sandbox, sell in live. Switch to live when testing is done.
• Revoke when in doubt. If there's any chance of a leak, revoking and creating a new key takes seconds.
• IP restriction (optional): you can restrict your live key to work only from your own server IP — request this from Woxx for extra security.

I made a booking in sandbox — was it real?

No. Sandbox is entirely a test; the response comes with SBX-… and no real record/debt is created.

I lost the Secret, what do I do?

The Secret can't be shown again. Revoke that key and create a new one; save the new Secret immediately.

How long is a token valid?

1 hour. When it expires, get a new token with the same API Key + Secret — your key doesn't change.

When do I get a live key?

After you click "Request live access", with Woxx approval. It activates once the credit limit and required agreement are complete.

Why do I see prices without markup in the search list?

Your agency margin is applied on hotel detail and at booking; the list price is the base price. This is normal.

Which products can I sell?

Hotel, tour and cruise, depending on your key's scope. You see your scope in the scopes field of the token response.