Generating an API key in MyTourist
Updated on 2026-04-26
Goal
You need an API key + base URL to read your MyTourist data through our migration wizard. The key only grants read access — we change nothing in your MyTourist.
Step 1 — Sign in to MyTourist
Go to app.mytourist.cloud and sign in as the administrator of your property.
Step 2 — Navigate to Plugins → API
In the main menu on the left: Plugins → API. If you do not see the menu item, contact your MyTourist account manager (your role may not have API access).
Step 3 — Generate a new key
Click + New API key.
- Name: type
BedFlow migration— handy to find it again later. - Permissions: tick read-only access for:
bookingsdebtorsinvoicesroomtypesproductsvoucherscalendar
- Write access: leave everything off. We do not need it and it is an unnecessary risk.
Click Create.
Step 4 — Copy the key (visible only once!)
MyTourist shows the key only once. Copy it immediately or write it down somewhere safe — if you close this window you will never see it again and you have to generate a new one.
The key typically looks like this:
mt_live_KX9p7nRm2qLaY8wE1zU4vH6cI0sD9fG2jK4o
Step 5 — The base URL
For most accounts this is:
https://app.mytourist.cloud/api/v1
Only change this if MyTourist has explicitly given you a different address (e.g. enterprise customers on a dedicated subdomain).
Step 6 — Paste into BedFlow
At bedflow.eu/migrate (step 2 of the wizard) you paste both values. Click Next — we immediately test whether the connection works. On error you get a clear message ("No connection — check your key and URL"); on success you continue to the dry-run preview.
Security
- Keep your key safe: not in a Word document on your desktop, not in your email folder. We store it encrypted until after the migration and wipe it automatically afterwards.
- One key per migration: create a separate key for BedFlow, do not use the same one as for other integrations. That way you can revoke this one without affecting your other flows.
- Revoke the key after onboarding: after a successful migration you can delete the key in MyTourist. We will no longer have it by then.
What if I do not have API access?
Some MyTourist packages do not offer API access. Two options:
- Ask MyTourist support — for active customers, API is usually free to add.
- Book a hands-on migration session with us (€90/h). We help you request the right package upgrade or run the migration via a different route.