Overlook Hospitality API

Appearance

Authentication ​

Every request to the /v1 API except GET /v1/health must carry a bearer token:

http
Authorization: Bearer <token>

Tokens are issued by Overlook for your integration — request an API key to get one. Keep the token secret and send it only over HTTPS.

  • A missing, malformed, or incorrect token returns 401 unauthorized.
  • GET /v1/health is not authenticated.

Example ​

bash
curl -s https://api.overlookhospitality.com/v1/concierge \
  -H "Authorization: Bearer $OVERLOOK_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "hotelName": "...", "hotelCity": "...", "hotelState": "...",
        "checkinDate": "2026-10-05", "checkoutDate": "2026-10-10" }'

WARNING

Treat the token as a secret. Store it in an environment variable or secret manager — never in source control or a client-side application.

Rate limits ​

Sandbox keys are limited to 10,000 requests per day and 100 requests per minute. Requests over the limit return 429 rate_limited. GET /v1/health is not limited.

Production limits are negotiated per key. Request an API key and we'll set limits to fit your integration.

Overlook Hospitality API