Generating an API key in MyTourist

Updated on 2026-04-26

Goal

You need an API key + base URL to read your MyTourist data through our migration wizard. The key only grants read access — we change nothing in your MyTourist.

Step 1 — Sign in to MyTourist

Go to app.mytourist.cloud and sign in as the administrator of your property.

Step 2 — Navigate to Plugins → API

In the main menu on the left: PluginsAPI. If you do not see the menu item, contact your MyTourist account manager (your role may not have API access).

Step 3 — Generate a new key

Click + New API key.

  • Name: type BedFlow migration — handy to find it again later.
  • Permissions: tick read-only access for:
    • bookings
    • debtors
    • invoices
    • roomtypes
    • products
    • vouchers
    • calendar
  • Write access: leave everything off. We do not need it and it is an unnecessary risk.

Click Create.

Step 4 — Copy the key (visible only once!)

MyTourist shows the key only once. Copy it immediately or write it down somewhere safe — if you close this window you will never see it again and you have to generate a new one.

The key typically looks like this:

mt_live_KX9p7nRm2qLaY8wE1zU4vH6cI0sD9fG2jK4o

Step 5 — The base URL

For most accounts this is:

https://app.mytourist.cloud/api/v1

Only change this if MyTourist has explicitly given you a different address (e.g. enterprise customers on a dedicated subdomain).

Step 6 — Paste into BedFlow

At bedflow.eu/migrate (step 2 of the wizard) you paste both values. Click Next — we immediately test whether the connection works. On error you get a clear message ("No connection — check your key and URL"); on success you continue to the dry-run preview.

Security

  • Keep your key safe: not in a Word document on your desktop, not in your email folder. We store it encrypted until after the migration and wipe it automatically afterwards.
  • One key per migration: create a separate key for BedFlow, do not use the same one as for other integrations. That way you can revoke this one without affecting your other flows.
  • Revoke the key after onboarding: after a successful migration you can delete the key in MyTourist. We will no longer have it by then.

What if I do not have API access?

Some MyTourist packages do not offer API access. Two options:

  1. Ask MyTourist support — for active customers, API is usually free to add.
  2. Book a hands-on migration session with us (€90/h). We help you request the right package upgrade or run the migration via a different route.