API authentication
API keys
Booking endpoints require an active API key in the raw X-API-Key header:
curl -H "X-API-Key: YOUR_API_KEY" \
https://api.my-playrooms.de/v1/orders/ORDER_ID
Use the header directly. The public API does not use Authorization: Bearer tokens.
Playroom catalog and booking-option reads are available without a key.
Creating a key
- Sign in to My Playrooms.
- Open API keys in your account.
- Create a key and store it immediately; it is shown only once.
Ownership and security
- Orders created with a key belong to that key's account.
- An API key cannot read another account's order.
- The current API does not expose documented Read/Write/Admin scopes.
- Use one key per integration and revoke keys that are exposed or no longer needed.