API Access

Use this page to manage API access tokens for your organization.

Tokens let your systems connect to Guestway for automation and data sync.

Treat tokens like passwords. Anyone with a token can access your account via the API.

Availability

API access requires a partnership agreement with Guestway.

If you don’t see this page, or need access enabled, reach out to Guestway.

What you can do here

From Settings → API Access, you can:

• View existing tokens and their status.

• Create new tokens for integrations or internal tools.

• Revoke tokens you no longer trust or need.

Create a token

1

Create

Click Create token.

Give it a clear name. Use the system name and environment.

Examples:

• Zapier - production

• Data export - staging

2

Copy and store

Copy the token right away.

Store it in a secret manager. Do not paste it into docs or tickets.

3

Use it in your integration

Add the token to your integration configuration.

Use the authentication method provided with your API docs.

Rotate or revoke tokens

Rotate tokens on a schedule, or after any suspected exposure.

To rotate safely:

1. Create a new token.

2. Update your integration to use the new token.

3. Confirm requests succeed.

4. Revoke the old token.

Troubleshooting

• 401 / Unauthorized: token is missing, revoked, or incorrect.

• 403 / Forbidden: your token lacks access to that resource.

• Nothing works: confirm API access is enabled for your organization.