Corporate Travel Management (CTM) is a Brisbane-founded, ASX-listed (CTD) travel management company established in 1994 that procures, books and services corporate, government, meetings and events, resources, sport and leisure travel across Australia and New Zealand, North America, Europe and Asia. CTM sits on the buy side of the travel distribution chain: an IATA-accredited agency that aggregates supplier content from GDS, direct airline APIs and airline NDC connections and resells it to corporate clients through its own proprietary technology stack — the Lightning online booking tool, CTM Portal, CTM Mobile app, CTM Approve pre-trip approval, CTM Fare Forecaster and CTM Data Hub reporting. Its API posture is closed. CTM publishes no developer portal and no public API: developer.travelctm.com, developers.travelctm.com, api.travelctm.com and docs.travelctm.com do not resolve in DNS, and /developers, /api, /docs, /openapi.json, /swagger.json, /api-docs and /.well-known/security.txt all return HTTP 404 across the AU, US and UK sites. The only live non-marketing front door is a customer login — CTM Portal at www.ctmsmart.com.au (portal.travelctm.com now shows a "We've moved" notice pointing there). CTM's technology pages assert secure integration with client HR, expense, finance, ERP and single sign-on systems, but no interface contract, schema or endpoint is documented anywhere in public: the integration surface is proprietary and undocumented, reachable only under a managed-travel commercial agreement. The only published exit path is a GDPR/CCPA data-portability request by email to privacy@travelctm.com or DPO@travelctm.com; there is no self-service export.
Corporate Travel Management is listed with 1 API on the APIs.io network. Tagged areas include Travel, Australia, Corporate Travel, Travel Management Company, and Aviation.
Corporate Travel Management’s developer surface includes authentication, documentation, engineering blog, product news, and 46 more developer resources.
Regulatory Posture applies to this provider. Its tags matched the
Horizontal (data, software, accessibility, platform) regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for
this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero:
never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and
several others — scorable at all.
The six quality facets above are damped to 85 points between them,
because the conditional facet above carries the other
15. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 85% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
Show this score on your site.
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/corporate-travel-management/"><img src="https://apis.io/badge/corporate-travel-management/card.svg" alt="Corporate Travel Management on APIs.io — Kin Score by API Evangelist"></a>
Other styles, a README pill and a shields.io endpoint are on the badge page.
Raise your score.
Agent readiness — checks not met, largest first (exact, from this profile):
Idempotency+9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
Stable Error Semantics+8 pts — OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes
A2A Agent Card+8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
9 more unmet checks in the Agent Readiness table above.
Kin Score — facets with the most composite points still available (weight × headroom):
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
The private back-end API for CTM Portal, CTM's single sign-on customer portal. It is not documented, not announced and not offered to third parties — it was identified from the ...
CTM's proprietary online booking tool, built and managed in-house, which aggregates GDS content, direct low-cost-carrier API connections and live airline NDC offers into a singl...
CTM Portal
Single sign-on customer portal that consolidates CTM's travel tools for pre-trip planning, approvals, in-trip tracking, risk alerts and post-trip reporting. Live at www.ctmsmart...
CTM Approve
End-to-end pre-trip approval workflow used to enforce corporate travel policy before a booking is ticketed.
CTM Data Hub
Cloud-based travel reporting and analytics platform covering air, hotel, car, rail, traveller tracking, carbon emissions and wellbeing. No export, feed or API is documented.
CTM Fare Forecaster
Predictive fare forecasting tool used to time corporate air purchases.
CTM Mobile App
Traveller mobile application for booking and itinerary management on the go.
CTM Scout
Chat-based booking and servicing channel for managing travel bookings.
Travel Risk Management
Real-time traveller risk alerts by SMS and email plus a Travel Risk Hub of destination requirements.
NDC Content Integration
Lightning ingests live NDC content from airlines — Qantas' Premium NDC connection in Australia, American Airlines and United Airlines in the United States — alongside GDS and di...
aid: corporate-travel-management
name: Corporate Travel Management
kind: company
url: https://raw.githubusercontent.com/api-evangelist/corporate-travel-management/refs/heads/main/apis.yml
humanURL: https://www.travelctm.com/
description: 'Corporate Travel Management (CTM) is a Brisbane-founded, ASX-listed (CTD) travel management company established
in 1994 that procures, books and services corporate, government, meetings and events, resources, sport and leisure travel
across Australia and New Zealand, North America, Europe and Asia. CTM sits on the buy side of the travel distribution chain:
an IATA-accredited agency that aggregates supplier content from GDS, direct airline APIs and airline NDC connections and
resells it to corporate clients through its own proprietary technology stack — the Lightning online booking tool, CTM Portal,
CTM Mobile app, CTM Approve pre-trip approval, CTM Fare Forecaster and CTM Data Hub reporting. Its API posture is closed.
CTM publishes no developer portal and no public API: developer.travelctm.com, developers.travelctm.com, api.travelctm.com
and docs.travelctm.com do not resolve in DNS, and /developers, /api, /docs, /openapi.json, /swagger.json, /api-docs and
/.well-known/security.txt all return HTTP 404 across the AU, US and UK sites. The only live non-marketing front door is
a customer login — CTM Portal at www.ctmsmart.com.au (portal.travelctm.com now shows a "We''ve moved" notice pointing there).
CTM''s technology pages assert secure integration with client HR, expense, finance, ERP and single sign-on systems, but
no interface contract, schema or endpoint is documented anywhere in public: the integration surface is proprietary and undocumented,
reachable only under a managed-travel commercial agreement. The only published exit path is a GDPR/CCPA data-portability
request by email to privacy@travelctm.com or DPO@travelctm.com; there is no self-service export.'
deliveryModel:
model: saas
open_source: false
commercial: true
callable_host: false
label: Hosted service · you call their endpoint
confidence: medium
source:
- pricing
generated: '2026-08-28'
method: derived
accessModel:
pricing: enterprise
onboarding: unknown
trial: false
try_now: false
public: false
label: Enterprise
confidence: medium
probe_state: unreadable
source:
- authentication
- scopes
- security
generated: '2026-11-06'
method: derived
image: https://www.travelctm.com/global/wp-content/themes/ctm/images/ctm-logo-long-header.png
tags:
- Travel
- Australia
- Corporate Travel
- Travel Management Company
- Aviation
- NDC
- Distribution
- Booking
- Hotels
- Meetings and Events
created: '2026-07-28'
modified: '2026-10-20'
specificationVersion: '0.23'
maintainers:
- FN: Kin Lane
email: kin@apievangelist.com
url: https://kinlane.com
common:
- type: DeveloperPortal
url: https://portal.travelctm.com/
- type: TrustCenter
url: security/corporate-travel-management-trust-center.yml
- type: Hosts
url: hosts/corporate-travel-management-hosts.yml
- type: IntegrationEdges
url: integrations/corporate-travel-management-integration-edges.yml
- type: Vendors
url: vendors/corporate-travel-management-vendors.yml
- type: SDKs
url: packages/corporate-travel-management-packages.yml
- type: DomainSecurity
url: security/corporate-travel-management-domain-security.yml
- type: WellKnown
url: well-known/corporate-travel-management-well-known.yml
- type: OpenIDConnect
url: well-known/corporate-travel-management-openid-configuration.json
- type: Authentication
url: authentication/corporate-travel-management-authentication.yml
- type: OAuthScopes
url: scopes/corporate-travel-management-scopes.yml
- type: Conventions
url: conventions/corporate-travel-management-conventions.yml
- type: Conformance
url: conformance/corporate-travel-management-conformance.yml
- type: Lifecycle
url: lifecycle/corporate-travel-management-lifecycle.yml
- type: Packages
url: packages/corporate-travel-management-packages.yml
- type: Components
url: components/corporate-travel-management-components.yml
- type: DesignSystem
url: https://compass.ctmdevelopment.com/
- type: Website
url: https://www.travelctm.com/
- type: Website
url: https://au.travelctm.com/
- type: Website
url: https://us.travelctm.com/
- type: Website
url: https://uk.travelctm.com/
- type: Website
url: https://asia.travelctm.com/
- type: Login
url: https://www.ctmsmart.com.au/
- type: Documentation
url: https://au.travelctm.com/technology/
- type: Documentation
url: https://au.travelctm.com/technology/lightning/
- type: Documentation
url: https://au.travelctm.com/technology/travel-portal/
- type: Documentation
url: https://au.travelctm.com/technology/travel-reporting/
- type: Documentation
url: https://au.travelctm.com/technology/pre-trip-approval/
- type: Documentation
url: https://au.travelctm.com/technology/travel-forecasting/
- type: Documentation
url: https://au.travelctm.com/technology/ctm-mobile-app/
- type: Documentation
url: https://au.travelctm.com/technology/ctm-scout/
- type: Documentation
url: https://au.travelctm.com/technology/risk-management/
- type: Documentation
url: https://au.travelctm.com/ndc/
- type: Documentation
url: https://us.travelctm.com/ndc/
- type: Blog
url: https://au.travelctm.com/blog/
- type: BlogRSS
url: https://www.travelctm.com/global/feed/
- type: BlogRSS
url: https://us.travelctm.com/feed/
- type: News
url: https://au.travelctm.com/news/
- type: TermsOfService
url: https://au.travelctm.com/terms-and-conditions/
- type: PrivacyPolicy
url: https://au.travelctm.com/privacy/
- type: CookiePolicy
url: https://au.travelctm.com/cookie-policy/
- type: Compliance
url: https://au.travelctm.com/payment-card-industry-data-security-standard/
- type: InvestorRelations
url: https://investor.travelctm.com.au/
- type: Careers
url: https://au.travelctm.com/careers/
- type: Contact
url: https://au.travelctm.com/contact/
- type: Contact
url: https://www.travelctm.com/global/contact-ctm/
- type: Newsroom
url: https://www.travelctm.com/global/ctm-news/
- type: X
url: https://twitter.com/TravelCTM_US
- type: Facebook
url: https://www.facebook.com/CorporateTravelManagementUS/
- type: LinkedIn
url: https://www.linkedin.com/company/corporate-travel-management-ctm-group
- type: Features
data:
- name: Lightning
description: CTM's proprietary online booking tool, built and managed in-house, which aggregates GDS content, direct low-cost-carrier
API connections and live airline NDC offers into a single policy-controlled corporate search and booking flow.
- name: CTM Portal
description: Single sign-on customer portal that consolidates CTM's travel tools for pre-trip planning, approvals, in-trip
tracking, risk alerts and post-trip reporting. Live at www.ctmsmart.com.au (portal.travelctm.com now points users there)
for existing customers only.
- name: CTM Approve
description: End-to-end pre-trip approval workflow used to enforce corporate travel policy before a booking is ticketed.
- name: CTM Data Hub
description: Cloud-based travel reporting and analytics platform covering air, hotel, car, rail, traveller tracking, carbon
emissions and wellbeing. No export, feed or API is documented.
- name: CTM Fare Forecaster
description: Predictive fare forecasting tool used to time corporate air purchases.
- name: CTM Mobile App
description: Traveller mobile application for booking and itinerary management on the go.
- name: CTM Scout
description: Chat-based booking and servicing channel for managing travel bookings.
- name: Travel Risk Management
description: Real-time traveller risk alerts by SMS and email plus a Travel Risk Hub of destination requirements.
- name: NDC Content Integration
description: Lightning ingests live NDC content from airlines — Qantas' Premium NDC connection in Australia, American
Airlines and United Airlines in the United States — alongside GDS and direct API content. CTM consumes NDC; it does
not publish an NDC endpoint of its own.
apis:
- aid: corporate-travel-management:ctm-portal-host-api
name: CTM Portal Host API
description: 'The private back-end API for CTM Portal, CTM''s single sign-on customer portal. It is not documented, not
announced and not offered to third parties — it was identified from the portal''s own client bootstrap, which sets hostApiUrl
to https://portal-host.api.ctmsmart.com/api. The host is live (GET / and GET /api return HTTP 200 text/plain "Healthy")
and is an ASP.NET Core application that emits RFC 7807-style application/problem+json errors, but every specification
path — /openapi.json, /swagger.json, /swagger/v1/swagger.json, /api-docs, /graphql — returns 404, and no /.well-known/oauth-protected-resource
metadata is served. Calls are bearer-token protected through CTM''s Auth0 tenant (travelctm-au-production.au.auth0.com),
whose OIDC discovery document is the only anonymous machine-readable surface CTM operates. Recorded here as an observed,
undocumented integration surface, not as an available API: there is no developer sign-up, no documentation, no sandbox
and no terms permitting third-party use.'
humanURL: https://www.ctmsmart.com.au/
baseURL: https://portal-host.api.ctmsmart.com/api
tags:
- Corporate Travel
- Travel
- Booking
- Undocumented
properties:
- type: Authentication
url: authentication/corporate-travel-management-authentication.yml
- type: OAuthScopes
url: scopes/corporate-travel-management-scopes.yml
- type: Conventions
url: conventions/corporate-travel-management-conventions.yml
- type: WellKnown
url: well-known/corporate-travel-management-well-known.yml
- type: Login
url: https://www.ctmsmart.com.au/
x-coverage:
state: unreadable
reason: no-machine-readable-spec
method: derived
generated: '2026-10-20'
generator: derive-coverage.py (pre-flight evidence)
detail: the company publishes developer documentation but serves no machine-readable contract from it
evidence:
- url: https://www.travelctm.com/
status: 200
x-enrichment:
date: '2026-10-20'
status: enriched
artifacts_added: 6
pass: modular-v1
engine: identity=anthropic,contract=anthropic,surfaces=anthropic,docs=anthropic,regulatory=anthropic
Corporate Travel Management API — frequently asked questions
Does Corporate Travel Management have an API?
Yes. APIs.io lists 1 API from Corporate Travel Management, including CTM Portal Host API.
How do I authenticate with the Corporate Travel Management API?
Corporate Travel Management documents its authentication (oauth2/openIdConnect · 1 scheme). The details are profiled on APIs.io as Corporate Travel Management Authentication.
Is the Corporate Travel Management API ready for AI agents?
Corporate Travel Management has a Kin Score of 29.3 out of 100 (thin) and an Agent Readiness score of 17.6 (agent-aware), scored by API Evangelist on 2026-11-06.
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
Kin Score
How this is scored →
It updates itself when the score changes. Paste this where you link to your API docs: