Agoda provides a sandbox environment which can be used for creating test bookings. The servers behind our sandbox environment are identical to our production servers with limited capacity. Partners are allowed to test only in the sandbox environment before attempting to test in the live environment. No testing on the live environment is allowed before explicit approval by your Agoda Account Manager.
Please note that unauthorized test bookings on the live environment may incur a non-refundable cancellation fee.
In order for Agoda to maintain high quality of service on our APIs, it is recommended that partners set <=5 minutes time to live (TTL) on DNS servers and applications connecting to the Agoda API URLs. This will allow Agoda to perform fast fail-overs utilization our multi data centers in the event that one data center becomes unavailable.
All requests must include an Authorization Header with siteid and apikey (with a colon in between) and it must match with the siteid and apikey in the request body. Authorization header is required for all API requests.
Here is an example complete Authorization header:
Compression is an effective way to save bandwidth and speed up your site. We recommend all requests set HTTP request header for compression as below:
Accept-Encoding: gzip,deflats
In terms of security aspect, to comply The PCI Security Industry Standard, we require all partners to verify that TLS v1.2 is being used by your production system.
The test site credential is setup and enabled for every available features of our API. This site credential is allowed to access Agoda Sandbox environment only. Please contact your account manager for the detail
If you are an existing partner and you already have a site credential, you can use the provided site credential to start making requests against our Sandbox endpoints. Once you passed our certification process and receive the green-light to go-live from us, you can simply switch your request endpoints to the production endpoints as provided later without any additional code changes.
If you would like to become our partner and obtain your own site credential, please contact our Account Manager
We accept most of the globally accepted SSL Certificate Authorities, however it would be best to double check with our Agoda representatives