Skip to main content

API Access

Manage developer access and API keys for custom integrations

Hayden Zammit Meaney avatar
Written by Hayden Zammit Meaney
Updated today

API Access

The Launchpad API lets developers build custom integrations and automate tasks. API access settings allow you to manage API keys, monitor usage, and control developer access to your organisation's data.

What is an API?

An API (Application Programming Interface) is a way for different software systems to communicate. The Launchpad API allows:

  • Custom software to read and write data in your Launchpad account

  • Automated workflows and integrations

  • Connection to systems without pre-built integrations

  • Mobile app development

  • Website integrations

Who needs API access?

API access is typically used by:

  • Web developers — building custom booking widgets

  • Software integrators — connecting Launchpad to other systems

  • IT teams — automating business processes

  • Agencies — building solutions for multiple clients

Most tourism operators don't need to manage API access directly. Standard integrations cover common use cases.

Accessing API settings

  • Go to Settings from the main menu

  • Click API or Developer

  • You'll see API configuration options

Or go directly to Settings > API.

API keys

What is an API key?

An API key is a unique code that identifies and authenticates API requests. It's like a password for your developer connections.

Viewing your API keys

- Key name/identifier - Creation date - Last used date - Key status

Creating a new API key

  • Click Create API Key or Generate New Key

  • Enter a name for the key (e.g., "Website Booking Widget")

  • Select permissions for the key

  • Click Create

  • Important: Copy the key immediately — you won't be able to see it again

API key permissions

When creating a key, set what it can access:

Read permissions:

  • View products and availability

  • Read booking information

  • Access customer data

  • View pricing

Write permissions:

  • Create bookings

  • Update booking status

  • Add customers

  • Modify products

Assign only the permissions needed for the specific integration.

Revoking an API key

If a key is compromised or no longer needed:

  • Find the key to revoke

  • Click Revoke or Delete

  • Confirm the action

The key stops working immediately. Any integrations using it will fail.

API usage

Monitoring usage

Track how your API is being used:

- Requests per day/month - Which endpoints are called - Error rates - Response times

Rate limits

API access has rate limits to prevent abuse:

  • Per minute: Varies by plan

  • Per day: Varies by plan

  • Per month: Varies by plan

Exceeding limits temporarily blocks requests. Contact support for limit increases.

Usage alerts

Set up alerts for unusual activity:

  • Enable usage notifications

  • Set thresholds (e.g., alert at 80% of limit)

  • Receive notifications when thresholds are reached

Webhooks

What are webhooks?

Webhooks send real-time notifications when events happen in Launchpad:

  • New booking created

  • Booking cancelled

  • Payment received

  • Customer added

Your systems receive instant updates instead of constantly checking.

Configuring webhooks

- Webhook URL (your endpoint) - Events to receive - Secret key for verification

  • Save the webhook

  • Test with a sample event

Webhook events

Common events you can subscribe to:

Event

Description

booking.created

New booking made

booking.updated

Booking modified

booking.cancelled

Booking cancelled

payment.received

Payment processed

customer.created

New customer added

availability.updated

Availability changed

Security best practices

Protecting API keys

  • Keep keys secret — never expose in client-side code

  • Use environment variables — don't hardcode in source code

  • Limit permissions — only grant what's needed

  • Rotate regularly — replace keys periodically

  • Revoke immediately — if a key may be compromised

Secure connections

  • Always use HTTPS

  • Validate webhook signatures

  • Implement proper authentication

  • Monitor for unusual patterns

Access control

  • Only Admins should manage API keys

  • Document who has access to each key

  • Review API access regularly

  • Remove unused keys

Troubleshooting

API requests failing

If API calls aren't working:

  • Verify the API key is valid and not revoked

  • Check the key has necessary permissions

  • Confirm you're using the correct endpoint

  • Review error messages for specific issues

  • Check rate limits aren't exceeded

Authentication errors

If you get authentication errors:

  • Ensure the API key is sent correctly in headers

  • Check for typos in the key

  • Verify the key hasn't been revoked

  • Try generating a new key

Webhooks not receiving events

If webhooks aren't triggering:

  • Verify the webhook URL is accessible

  • Check your server is running

  • Review webhook logs in Launchpad

  • Test with a sample event

  • Ensure the URL responds with 200 status

Data not appearing

If API calls succeed but data is missing:

  • Check you're querying the right organisation

  • Verify permissions include the data type

  • Look for filter parameters limiting results

  • Check the data exists in Launchpad

Getting developer support

API documentation

Full API documentation is available:

  • Click API Documentation or Docs

  • Browse endpoints, parameters, and examples

Developer support

For API assistance:

  • Review API documentation first

  • Check common issues above

  • Contact support with specific error messages

  • Include your request details and responses

API plans

Availability

API access availability depends on your plan:

Plan

API Access

Starter

Limited read-only

Professional

Full API access

Enterprise

Full access + premium support

Upgrading

If you need more API capabilities:


The API opens Launchpad to custom solutions tailored to your business.

Did this answer your question?