Corporate Travel Management

CTM Portal Host API

The private back-end API for CTM Portal, CTM's single sign-on customer portal. It is not documented, not announced and not offered to third parties — it was identified from the portal's own client bootstrap, which sets hostApiUrl to https://portal-host.api.ctmsmart.com/api. The host is live (GET / and GET /api return HTTP 200 text/plain "Healthy") and is an ASP.NET Core application that emits RFC 7807-style application/problem+json errors, but every specification path — /openapi.json, /swagger.json, /swagger/v1/swagger.json, /api-docs, /graphql — returns 404, and no /.well-known/oauth-protected-resource metadata is served. Calls are bearer-token protected through CTM's Auth0 tenant (travelctm-au-production.au.auth0.com), whose OIDC discovery document is the only anonymous machine-readable surface CTM operates. Recorded here as an observed, undocumented integration surface, not as an available API: there is no developer sign-up, no documentation, no sandbox and no terms permitting third-party use.

Documentation GitHub

Documentation

📖

Authentication

https://raw.githubusercontent.com/api-evangelist/corporate-travel-management/refs/heads/main/authentication/corporate-travel-management-authentication.yml

Other Resources

🔗

OAuthScopes

https://raw.githubusercontent.com/api-evangelist/corporate-travel-management/refs/heads/main/scopes/corporate-travel-management-scopes.yml

🔗

Conventions

https://raw.githubusercontent.com/api-evangelist/corporate-travel-management/refs/heads/main/conventions/corporate-travel-management-conventions.yml

🔗

WellKnown

https://raw.githubusercontent.com/api-evangelist/corporate-travel-management/refs/heads/main/well-known/corporate-travel-management-well-known.yml

🔗

https://www.ctmsmart.com.au/

🔗

APIsJSON

https://raw.githubusercontent.com/api-evangelist/corporate-travel-management/refs/heads/main/apis.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/ctm-portal-host-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

aid: corporate-travel-management:ctm-portal-host-api
name: CTM Portal Host API
description: 'The private back-end API for CTM Portal, CTM''s single sign-on customer portal. It is not
  documented, not announced and not offered to third parties — it was identified from the portal''s own
  client bootstrap, which sets hostApiUrl to https://portal-host.api.ctmsmart.com/api. The host is live
  (GET / and GET /api return HTTP 200 text/plain "Healthy") and is an ASP.NET Core application that emits
  RFC 7807-style application/problem+json errors, but every specification path — /openapi.json, /swagger.json,
  /swagger/v1/swagger.json, /api-docs, /graphql — returns 404, and no /.well-known/oauth-protected-resource
  metadata is served. Calls are bearer-token protected through CTM''s Auth0 tenant (travelctm-au-production.au.auth0.com),
  whose OIDC discovery document is the only anonymous machine-readable surface CTM operates. Recorded
  here as an observed, undocumented integration surface, not as an available API: there is no developer
  sign-up, no documentation, no sandbox and no terms permitting third-party use.'
humanURL: https://www.ctmsmart.com.au/
baseURL: https://portal-host.api.ctmsmart.com/api
tags:
- Corporate Travel
- Travel
- Booking
- Undocumented
properties:
- type: Authentication
  url: authentication/corporate-travel-management-authentication.yml
- type: OAuthScopes
  url: scopes/corporate-travel-management-scopes.yml
- type: Conventions
  url: conventions/corporate-travel-management-conventions.yml
- type: WellKnown
  url: well-known/corporate-travel-management-well-known.yml
- type: Login
  url: https://www.ctmsmart.com.au/