Introduction

Welcome to Agoda's sandbox environment! This is your go-to space for creating test bookings. Our sandbox servers mirror our production servers but with limited capacity. We encourage all partners to thoroughly test in the sandbox before moving to the live environment. Please remember, testing in the live environment requires explicit approval from your Agoda Account Manager.
Unauthorized test bookings in the live environment may result in a non-refundable cancellation fee.

Short TTL for DNS

To ensure top-notch service quality on our APIs, we recommend setting a time-to-live (TTL) of 5 minutes or less on DNS servers and applications connecting to Agoda API URLs. This helps us quickly switch between data centers if one becomes unavailable, ensuring seamless service.

HTTP Header

Authorization

Every request must include an Authorization Header with your siteid and apikey, separated by a colon. This must match the siteid and apikey in the request body. The Authorization header is mandatory for all API requests.
Example Authorization header:

Authorization: 123456:00000000-0000-0000-0000-000000000000

Accept-Encoding

To save bandwidth and speed up your site, we recommend enabling compression. Set the HTTP request header for compression as follows:

Accept-Encoding: gzip,deflats

TLS Protocol

For security and to comply with PCI Security Industry Standards, ensure your production system uses TLS v1.2.

Sandbox Environment URLs

Your test site credentials are set up to access all features of our API in the Agoda Sandbox environment. For details, please contact your account manager.
If you're an existing partner with site credentials, you can start making requests to our Sandbox endpoints. After passing our certification process and receiving approval to go live, simply switch your request endpoints to the production ones provided later, with no additional code changes needed.
Interested in becoming a partner and obtaining your own site credentials? Reach out to our Account Manager

SSL Certificate

We accept most globally recognized SSL Certificate Authorities. However, it's best to confirm with your Agoda representative.