Marriott International · Authentication Profile

Marriott Authentication

Authentication

Marriott International secures its APIs with http and oauth2 across 4 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode and clientCredentials flow(s).

TravelUnited StatesHospitalityHotelsBookingDistributionLoyaltyShort Term RentalCorporate Travel
Methods: http, oauth2 Schemes: 4 OAuth flows: authorizationCode, clientCredentials API key in:

Security Schemes

basicAuth http
scheme: basic
bearerAuth http
scheme: bearer
OAuth2 oauth2
· flows: authorizationCode
application oauth2
· flows: clientCredentials

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-28'
method: derived
source: openapi/marriott-commerce-payment-processor-api-openapi.json, openapi/marriott-finance-status-notifier-api-openapi.json,
  openapi/marriott-tip-internet-portal-api-openapi.json
summary:
  types:
  - http
  - oauth2
  oauth2_flows:
  - authorizationCode
  - clientCredentials
schemes:
- name: basicAuth
  type: http
  scheme: basic
  sources:
  - openapi/marriott-commerce-payment-processor-api-openapi.json
  - openapi/marriott-tip-internet-portal-api-openapi.json
- name: bearerAuth
  type: http
  scheme: bearer
  bearerFormat: JWT
  sources:
  - openapi/marriott-commerce-payment-processor-api-openapi.json
  - openapi/marriott-tip-internet-portal-api-openapi.json
- name: OAuth2
  type: oauth2
  flows:
  - flow: authorizationCode
    authorizationUrl: /v3/ent-auth/sso/authorize
    tokenUrl: /v3/ent-auth/sso/token
    scopes: 1
  sources:
  - openapi/marriott-commerce-payment-processor-api-openapi.json
- name: application
  type: oauth2
  flows:
  - flow: clientCredentials
    tokenUrl: http://example.com/oauth/token
    scopes: 1
  sources:
  - openapi/marriott-finance-status-notifier-api-openapi.json