Viator · Authentication Profile

Viator Authentication

Authentication

Viator secures its APIs with apiKey across 3 declared security schemes, as derived from its OpenAPI definitions.

TravelUnited StatesTours and ActivitiesExperiencesOTABookingDistributionMarketplaceAffiliateHospitality
Methods: apiKey Schemes: 3 OAuth flows: API key in: header, query

Security Schemes

Legacy-API-key apiKey
· in: query (apiKey)
API-key apiKey
· in: header (exp-api-key)
ApiKeyHeader apiKey
· in: header (X-Api-Key)

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-28'
method: derived
source: openapi/viator-affiliate-api-v1-openapi.json, openapi/viator-merchant-api-v1-openapi.json,
  openapi/viator-partner-api-v2-openapi.json, openapi/viator-reservation-system-api-openapi.json
summary:
  types:
  - apiKey
  api_key_in:
  - header
  - query
schemes:
- name: Legacy-API-key
  type: apiKey
  in: query
  parameter: apiKey
  sources:
  - openapi/viator-affiliate-api-v1-openapi.json
  - openapi/viator-merchant-api-v1-openapi.json
- name: API-key
  type: apiKey
  in: header
  parameter: exp-api-key
  sources:
  - openapi/viator-affiliate-api-v1-openapi.json
  - openapi/viator-merchant-api-v1-openapi.json
  - openapi/viator-partner-api-v2-openapi.json
- name: ApiKeyHeader
  type: apiKey
  in: header
  parameter: X-Api-Key
  sources:
  - openapi/viator-reservation-system-api-openapi.json