Authentication

Every request must be authenticated with your API token.

Getting a token

API tokens are issued per partner account. If you don’t have one yet, request access and we’ll set you up.

Sending the token

The API accepts the token two ways. Use the Authorization header wherever possible; the query parameter is a fallback for environments that can’t set headers.

Authorization header (recommended)

curl https://connect.visamundi.io/v3/countries \
  -H "Authorization: Bearer YOUR_TOKEN"

`access_token` query parameter

curl "https://connect.visamundi.io/v3/countries?access_token=YOUR_TOKEN"

Verifying it works

The quickest check is the /hello endpoint — a lightweight authenticated ping. A valid token returns 200 with data: "Hello World!":

curl https://connect.visamundi.io/v3/hello \
  -H "Authorization: Bearer YOUR_TOKEN"

{ "success": true, "statusCode": 200, "code": "ok", "data": "Hello World!" }

A missing or invalid token returns 403:

{
  "success": false,
  "statusCode": 403,
  "code": "invalid_api_key",
  "message": "API key is invalid or missing to access to the requested resource"
}

You can test your token live in the API reference — set it once in the authentication panel and every “try it” call will use it.