# CTM Portal Host API

**Canonical:** https://apis.io/apis/corporate-travel-management/ctm-portal-host-api/  
**Provider:** Corporate Travel Management — https://apis.io/providers/corporate-travel-management/  
**Base URL:** https://portal-host.api.ctmsmart.com/api  
**Documentation:** https://www.ctmsmart.com.au/

CTM Portal Host API is published by [Corporate Travel Management](https://apis.io/providers/corporate-travel-management/) on the [APIs.io](https://apis.io/) network. Tagged areas include Corporate Travel, Travel, Booking, and Undocumented. The published artifact set on APIs.io includes authentication docs.

The private back-end API for CTM Portal, CTM's single sign-on customer portal. It is not documented, not announced and not offered to third parties — it was identified from the portal's own client bootstrap, which sets hostApiUrl to https://portal-host.api.ctmsmart.com/api. The host is live (GET / and GET /api return HTTP 200 text/plain "Healthy") and is an ASP.NET Core application that emits RFC 7807-style application/problem+json errors, but every specification path — /openapi.json, /swagger.json, /swagger/v1/swagger.json, /api-docs, /graphql — returns 404, and no /.well-known/oauth-protected-resource metadata is served. Calls are bearer-token protected through CTM's Auth0 tenant (travelctm-au-production.au.auth0.com), whose OIDC discovery document is the only anonymous machine-readable surface CTM operates. Recorded here as an observed, undocumented integration surface, not as an available API: there is no developer sign-up, no documentation, no sandbox and no terms permitting third-party use.

## Machine-readable artifacts (6)

- **Authentication** — https://raw.githubusercontent.com/api-evangelist/corporate-travel-management/refs/heads/main/authentication/corporate-travel-management-authentication.yml
- **OAuthScopes** — https://raw.githubusercontent.com/api-evangelist/corporate-travel-management/refs/heads/main/scopes/corporate-travel-management-scopes.yml
- **Conventions** — https://raw.githubusercontent.com/api-evangelist/corporate-travel-management/refs/heads/main/conventions/corporate-travel-management-conventions.yml
- **WellKnown** — https://raw.githubusercontent.com/api-evangelist/corporate-travel-management/refs/heads/main/well-known/corporate-travel-management-well-known.yml
- **Login** — https://www.ctmsmart.com.au/
- **APIsJSON** — https://raw.githubusercontent.com/api-evangelist/corporate-travel-management/refs/heads/main/apis.yml

## Tags

Corporate Travel, Travel, Booking, Undocumented

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/corporate-travel-management/ctm-portal-host-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/corporate-travel-management/.
