{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "skyscanner", "name": "Skyscanner Travel APIs", "vendor": "Skyscanner Limited", "vendorUrl": "https://www.partners.skyscanner.net/product/travel-api", "kind": "http-api", "category": "travel", "summary": "Skyscanner's partner APIs for flight, hotel and car hire search, with live and indicative prices, hotel content and reviews, and deep links that send travellers to airlines and travel agents to book. Access is by application.", "url": "https://www.anchorterminal.com/tools/skyscanner", "markdownUrl": "https://www.anchorterminal.com/tools/skyscanner.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/skyscanner.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/skyscanner.json", "license": "Proprietary service. The API terms are in the partner contract and are not public", "transports": [ "http" ], "remoteUrl": "https://partners.api.skyscanner.net", "packages": [], "auth": "api-key", "authNotes": "Partner approval. A business applies at https://www.partners.skyscanner.net/contact/travel-api, Skyscanner reviews each application within two weeks, and an account manager issues the key after a commercial agreement and onboarding on impact.com. The key goes in the `x-api-key` header on every call. Rate limits are set per key. No scopes, self-serve rotation or OAuth were found in the docs.", "pricing": "free", "pricingNotes": "No usage fee. Skyscanner's partner help centre says the Travel APIs carry no per-booking, monthly or yearly fee and that partners earn a revenue share on bookings, tracked through Impact. The share is not published. There is no sandbox, trial or test key, and access starts only after an approved application and a commercial agreement (checked 2026-10-08).", "priceSummary": "Free", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer docs, the API reference or the partner pages (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://developers.skyscanner.net/docs/intro", "capabilities": [ "travel.flights", "travel.stays", "travel.search" ], "tags": [ "hosted", "closed-source", "partner-only", "api-key", "metasearch", "flights", "hotels", "car-hire", "affiliate", "bug-bounty" ], "lastRelease": "2026-10-01", "graded": true, "anchor": { "graded": true, "score": 45.6, "grade": "E", "agentReady": false, "rank": 655, "ranked": true, "rankOf": 722, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 50, "maintenance": 60, "payments": 25, "reliability": 35, "schema": 56, "security": 48, "transparency": 52 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 35, "points": 7, "reason": "Graded as a hosted API. No status page is linked from the developer docs or the partner site (0). No incident history to read (5). Default rate limits are published for every API per second, minute and hour, for example 100 flight search creates and 500 polls a minute (15). 429 is documented, but the guidance is to contact the account manager, with no `Retry-After` or backoff advice. Calls are searches, so retries are safe (5 of 15). No SLA found (0). Flights are on v3, hotels and car hire on v1, and the car hire beta labels were removed on 25 February 2025 (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 56, "points": 9.1, "reason": "A Redoc reference covers 13 APIs and 21 operations with typed request and response schemas, but no OpenAPI file to download was found (10 of 25). `llms.txt` on the docs host returns 403 and no Markdown docs were found (0). Overview pages explain when to use live or indicative prices and how create and poll work, while reference field descriptions are short (12 of 20). Enums for cabin class, status and sort types and stated required fields, with few numeric constraints (10 of 15). Request and response samples per operation and a status code list, with thin error bodies. The FAQ says no code samples are published (9 of 15). Versioned paths and a dated public changelog (15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 50, "points": 8.13, "reason": "Flight results arrive as one large document with no field selection or paging, while hotels take `initialPageSize` and page limits (8 of 25). Hotels live prices and reviews have limit and offset paging, server-side filters and sort. Flights have carrier and agent include and exclude lists only (12 of 20). Status codes are listed and expired sessions return a documented 400 message, but error bodies are a code and a message (10 of 20). Every call is a read, so retries are safe, and sessions can be recreated (14 of 20). Five required fields for a flight search and sensible defaults, but no SDK in any language (6 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 48, "points": 8.4, "reason": "One API key per partner in the `x-api-key` header, issued by an account manager. Skyscanner can revoke access, and no scopes or self-serve rotation were found (15 of 30). The API is read-only, with no booking or payment calls, so a leaked key cannot spend money (12 of 20). Hotel reviews and supplier content are third-party text, with no injection guidance (5 of 15). Impact reports show redirects and revenue, and no per-call log was found (3 of 15). security.txt valid to 2030, a vulnerability disclosure policy and a public Bugcrowd bounty. Certifications were not checked (13 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 25, "points": 3.13, "reason": "No x402, MPP or L402 (0). The help centre says the APIs carry no per-booking, monthly or yearly fee and pay partners a revenue share, without publishing the share (15 of 20). Use is free with no card, but only after an approved application and a commercial agreement, so half (10 of 20). A person applies, is reviewed within two weeks and signs an agreement (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 60, "points": 5.25, "reason": "The newest changelog entry is 1 October 2026 (30). Four dated entries in the last 90 days, on 14 July, 19 August, 30 September and 1 October, all documentation changes (20). Public changelog, a partner help centre with articles updated this week and a support request form. Support otherwise runs through account managers (10 of 15). No current official SDK. The `skyscanner` PyPI package dates from April 2020 (0 of 15). No package to assess (0 of 10). We read the responsiveness line at 15 because this is a closed service, as the checklist allows." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 52, "points": 4.55, "note": "editorial 28, provenance 76", "reason": "Closed service. The API terms are in the partner's contract on impact.com and are not public, though the usage guidelines are (8 of 30). The privacy policy names Skyscanner Limited and says data is kept as long as needed, with no periods and no partner DPA found (12 of 30). No deprecation policy. The changelog recorded on 12 November 2025 that flight mash-ups had been unsupported since June 2025, and on 1 April 2026 that they were back (3 of 20). The privacy policy lists processor categories without names or locations (5 of 20)." } ], "assessment": { "date": "2026-10-08", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Flight results arrive as one large document with no field selection or paging, while hotels take `initialPageSize` and page limits (8 of 25). Hotels live prices and reviews have limit and offset paging, server-side filters and sort. Flights have carrier and agent include and exclude lists only (12 of 20). Status codes are listed and expired sessions return a documented 400 message, but error bodies are a code and a message (10 of 20). Every call is a read, so retries are safe, and sessions can be recreated (14 of 20). Five required fields for a flight search and sensible defaults, but no SDK in any language (6 of 15).", "maintenance": "The newest changelog entry is 1 October 2026 (30). Four dated entries in the last 90 days, on 14 July, 19 August, 30 September and 1 October, all documentation changes (20). Public changelog, a partner help centre with articles updated this week and a support request form. Support otherwise runs through account managers (10 of 15). No current official SDK. The `skyscanner` PyPI package dates from April 2020 (0 of 15). No package to assess (0 of 10). We read the responsiveness line at 15 because this is a closed service, as the checklist allows.", "payments": "No x402, MPP or L402 (0). The help centre says the APIs carry no per-booking, monthly or yearly fee and pay partners a revenue share, without publishing the share (15 of 20). Use is free with no card, but only after an approved application and a commercial agreement, so half (10 of 20). A person applies, is reviewed within two weeks and signs an agreement (0).", "reliability": "Graded as a hosted API. No status page is linked from the developer docs or the partner site (0). No incident history to read (5). Default rate limits are published for every API per second, minute and hour, for example 100 flight search creates and 500 polls a minute (15). 429 is documented, but the guidance is to contact the account manager, with no `Retry-After` or backoff advice. Calls are searches, so retries are safe (5 of 15). No SLA found (0). Flights are on v3, hotels and car hire on v1, and the car hire beta labels were removed on 25 February 2025 (10).", "schema": "A Redoc reference covers 13 APIs and 21 operations with typed request and response schemas, but no OpenAPI file to download was found (10 of 25). `llms.txt` on the docs host returns 403 and no Markdown docs were found (0). Overview pages explain when to use live or indicative prices and how create and poll work, while reference field descriptions are short (12 of 20). Enums for cabin class, status and sort types and stated required fields, with few numeric constraints (10 of 15). Request and response samples per operation and a status code list, with thin error bodies. The FAQ says no code samples are published (9 of 15). Versioned paths and a dated public changelog (15).", "security": "One API key per partner in the `x-api-key` header, issued by an account manager. Skyscanner can revoke access, and no scopes or self-serve rotation were found (15 of 30). The API is read-only, with no booking or payment calls, so a leaked key cannot spend money (12 of 20). Hotel reviews and supplier content are third-party text, with no injection guidance (5 of 15). Impact reports show redirects and revenue, and no per-call log was found (3 of 15). security.txt valid to 2030, a vulnerability disclosure policy and a public Bugcrowd bounty. Certifications were not checked (13 of 20).", "transparency": "Closed service. The API terms are in the partner's contract on impact.com and are not public, though the usage guidelines are (8 of 30). The privacy policy names Skyscanner Limited and says data is kept as long as needed, with no periods and no partner DPA found (12 of 30). No deprecation policy. The changelog recorded on 12 November 2025 that flight mash-ups had been unsupported since June 2025, and on 1 April 2026 that they were back (3 of 20). The privacy policy lists processor categories without names or locations (5 of 20)." }, "sources": [ { "what": "developer docs introduction (list of APIs)", "url": "https://developers.skyscanner.net/docs/intro", "seen": "2026-10-08" }, { "what": "authentication and how keys are issued", "url": "https://developers.skyscanner.net/docs/getting-started/authentication", "seen": "2026-10-08" }, { "what": "rate limits", "url": "https://developers.skyscanner.net/docs/getting-started/rate-limits", "seen": "2026-10-08" }, { "what": "usage guidelines (user-generated requests, look to book, logo)", "url": "https://developers.skyscanner.net/docs/getting-started/usage-guidelines", "seen": "2026-10-08" }, { "what": "changelog", "url": "https://developers.skyscanner.net/docs/change-log", "seen": "2026-10-08" }, { "what": "MCP server page", "url": "https://developers.skyscanner.net/docs/mcp-server", "seen": "2026-10-08" }, { "what": "FAQ (CORS, deep links required, no code samples)", "url": "https://developers.skyscanner.net/docs/faqs", "seen": "2026-10-08" }, { "what": "flights live prices API reference", "url": "https://developers.skyscanner.net/api/flights-live-pricing/", "seen": "2026-10-08" }, { "what": "flights live prices overview (session expiry)", "url": "https://developers.skyscanner.net/docs/flights-live-prices/overview", "seen": "2026-10-08" }, { "what": "hotels live prices overview (pagination, sessions)", "url": "https://developers.skyscanner.net/docs/hotels-live-prices/overview", "seen": "2026-10-08" }, { "what": "hotels reviews overview", "url": "https://developers.skyscanner.net/docs/hotels-reviews/overview", "seen": "2026-10-08" }, { "what": "tracking through Impact", "url": "https://developers.skyscanner.net/docs/flights-live-prices/tracking", "seen": "2026-10-08" }, { "what": "Travel API product page", "url": "https://www.partners.skyscanner.net/product/travel-api", "seen": "2026-10-08" }, { "what": "Travel API application page and acceptance criteria", "url": "https://www.partners.skyscanner.net/contact/travel-api", "seen": "2026-10-08" }, { "what": "help centre, cost of the API", "url": "https://skyscannerpartnersupport.zendesk.com/hc/en-us/articles/4524639452573-How-much-does-it-cost-to-use-the-Skyscanner-Flights-API", "seen": "2026-10-08" }, { "what": "help centre, API terms held in the Impact contract", "url": "https://skyscannerpartnersupport.zendesk.com/hc/en-us/articles/4687304080157-How-do-I-get-started-with-my-API-integration", "seen": "2026-10-08" }, { "what": "help centre, no bookings through the API", "url": "https://skyscannerpartnersupport.zendesk.com/hc/en-us/articles/4687268962077-Can-I-use-your-Flights-API-for-making-bookings-directly", "seen": "2026-10-08" }, { "what": "help centre, stale article on API coverage", "url": "https://skyscannerpartnersupport.zendesk.com/hc/en-us/articles/10881071767069-What-is-available-via-the-Travel-API", "seen": "2026-10-08" }, { "what": "unauthenticated request to the API (401 body and headers)", "url": "https://partners.api.skyscanner.net/apiservices/v3/culture/markets/en-GB", "seen": "2026-10-08" }, { "what": "security.txt", "url": "https://www.skyscanner.net/.well-known/security.txt", "seen": "2026-10-08" }, { "what": "vulnerability disclosure policy", "url": "https://www.skyscanner.net/vulnerability-disclosure-policy", "seen": "2026-10-08" }, { "what": "privacy policy", "url": "https://www.skyscanner.net/media/privacy-policy", "seen": "2026-10-08" }, { "what": "website terms of service (legal entity)", "url": "https://www.skyscanner.net/media/terms-of-service", "seen": "2026-10-08" }, { "what": "PyPI record for the old SDK", "url": "https://pypi.org/pypi/skyscanner/json", "seen": "2026-10-08" }, { "what": "RDAP for skyscanner.net", "url": "https://rdap.verisign.com/net/v1/domain/skyscanner.net", "seen": "2026-10-08" } ], "openQuestions": [ "unchecked: whether a status page exists. None is linked from the docs or partner site, and status.skyscanner.net did not connect from our network, so the status page is scored as absent", "unchecked: the Skyscanner API Terms and Conditions, which are available only inside a partner's contract on impact.com. `provenance.terms` is left out for that reason", "unchecked: `llms.txt`, `robots.txt` and security.txt on developers.skyscanner.net, which all return 403 Access Denied", "unchecked: Skyscanner's security certifications, and whether the Bugcrowd scope includes partners.api.skyscanner.net", "The revenue share paid to API partners is not published", "What the MCP server exposes (endpoint, tools, auth) is not published. It is recorded as a fact and not graded", "Whether an AI agent acting for a user counts as a user-generated request under the usage guidelines is not stated", "Whether keys can be rotated or scoped by the partner. Nothing in the public docs says so", "The changelog entries of the last 90 days are documentation changes. Whether the API itself changed in that time is not recorded publicly" ] }, "negative": 0, "verdict": "Thirteen documented search APIs cover flights, hotels and car hire behind one `x-api-key` header, with default rate limits published per endpoint and no usage fee. Access needs an approved application, an audience above 100,000 monthly users and a commercial agreement, and the usage guidelines bar live-price calls made without a user action. Booking happens on supplier sites.", "bestFor": "An established travel site or app with a large audience that wants metasearch prices across flights, hotels and car hire and is content to send users to suppliers to book.", "strengths": [ "Thirteen APIs and 21 operations cover flights, hotels and car hire, with live and indicative prices, hotel content, reviews, geography and autosuggest", "Default rate limits are published per endpoint, per second, minute and hour, such as 100 flight search creates a minute and 500 polls", "Skyscanner states the Travel APIs carry no per-booking, monthly or yearly fee, and partners earn a revenue share on bookings", "The docs changelog is dated and current, with four entries between 14 July and 1 October 2026", "Public bug bounty on Bugcrowd and a security.txt on www.skyscanner.net that runs to November 2030" ], "weaknesses": [ "Keys are issued only after an application review and a commercial agreement, with a stated minimum of 100,000 monthly active users", "The usage guidelines say live pricing calls are made only on user-generated requests, and automated calls without a user action are not permitted", "No booking, change or cancel calls. Every result carries a deep link and the traveller books on the supplier's site", "No downloadable OpenAPI file, SDK or code samples were found, and `llms.txt` on the docs host returns 403", "No status page, SLA or public API terms were found. The API terms sit in the partner's contract on impact.com" ], "agentNotes": [ "Send the key in the `x-api-key` header on every call to `https://partners.api.skyscanner.net`. CORS is not supported, so call from a server", "Create a live search only when a user has given origin, destination and exact dates. Use the indicative price endpoints for open-ended questions", "Poll `/search/poll/{sessionToken}` until `status` is `RESULT_STATUS_COMPLETE`, and replace earlier results only when `action` is `RESULT_ACTION_REPLACED`", "Start a new session when a poll returns 400. Flight session tokens last about an hour and hotel sessions at most 15 minutes", "Pass each `deepLink` to the traveller unchanged, since altered encoding breaks Impact tracking, and never put personal data in `subid2`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 45.6 } ], "editorialScores": { "ergonomics": 50, "maintenance": 60, "payments": 25, "reliability": 35, "schema": 56, "security": 48, "transparency": 28 }, "provenanceScore": 76 }, "connect": { "http": "curl --request POST 'https://partners.api.skyscanner.net/apiservices/v3/flights/live/search/create' \\\n --header 'x-api-key: your-api-key' \\\n --data '{\"query\":{\"market\":\"UK\",\"locale\":\"en-GB\",\"currency\":\"GBP\",\"queryLegs\":[{\"originPlaceId\":{\"iata\":\"LHR\"},\"destinationPlaceId\":{\"iata\":\"SIN\"},\"date\":{\"year\":2024,\"month\":12,\"day\":22}}],\"adults\":1,\"cabinClass\":\"CABIN_CLASS_ECONOMY\"}}'" }, "letme": { "capability": "https://letme.dev/travel.flights", "tool": "https://letme.dev/skyscanner" }, "notable": [ "Access is for established businesses with at least 100,000 monthly active users. Students, individuals, early start-ups and web development agencies are named as not eligible (https://www.partners.skyscanner.net/contact/travel-api)", "The usage guidelines say live pricing calls are made only on user-generated requests, that automated requests without a user action do not occur, and that 5 to 20 per cent of live search sessions are expected to end in a deep link click (https://developers.skyscanner.net/docs/getting-started/usage-guidelines)", "Skyscanner has an MCP server for partners building AI travel products, available case by case through an account manager or partners@skyscanner.net. No endpoint or tool list is published (https://developers.skyscanner.net/docs/mcp-server)", "The API has no booking calls. Skyscanner says it cannot take payment details or allow bookings through the API, and travellers are referred to supplier sites (https://skyscannerpartnersupport.zendesk.com/hc/en-us/articles/4687268962077-Can-I-use-your-Flights-API-for-making-bookings-directly)", "Default rate limits are published for every API, for example 100 a minute for flight search creates, 500 a minute for polls and 15 a minute for car hire creates (https://developers.skyscanner.net/docs/getting-started/rate-limits)", "The FAQ says the flights API is licensed only where searches lead to bookings, and partners must show a Powered by Skyscanner logo (https://developers.skyscanner.net/docs/faqs)", "A 2023 help centre article still says the Travel API has no hotels or car hire API, which the developer docs contradict (https://skyscannerpartnersupport.zendesk.com/hc/en-us/articles/10881071767069-What-is-available-via-the-Travel-API)" ], "area": "domain-data", "details": [ { "label": "Access", "value": "Application at www.partners.skyscanner.net/contact/travel-api, reviewed within two weeks, then a commercial agreement and Impact onboarding. Minimum 100,000 monthly active users" }, { "label": "APIs", "value": "13 APIs, 21 operations. Flights live and indicative prices, car hire live and indicative prices and agents, hotels live and indicative prices, content and reviews, plus culture, geo, autosuggest and carriers" }, { "label": "Base URL", "value": "`https://partners.api.skyscanner.net/apiservices`, with `/v3` for flights, culture, geo, carriers and autosuggest and `/v1` for hotels and car hire" }, { "label": "Auth", "value": "One API key per partner in the `x-api-key` header. No CORS" }, { "label": "Search flow", "value": "Live prices use `/search/create` then `/search/poll/{sessionToken}` until `RESULT_STATUS_COMPLETE`. Flight tokens last about an hour, hotel sessions at most 15 minutes" }, { "label": "Booking", "value": "None through the API. Each itinerary or pricing option has a deep link to the airline, agent or hotel supplier, tracked through Impact" }, { "label": "Rate limits", "value": "Per key. Defaults a minute are flights create 100, poll 500, indicative 500; car hire create 15, others 60; hotels create 100, poll 1,000, indicative, content and reviews 300; culture and geo 500" }, { "label": "Errors", "value": "400, 401, 403, 404, 429, 500 and 503 listed per operation. Bodies carry `code`, `message` and `details`. No `Retry-After` is documented" }, { "label": "Pagination", "value": "Hotels live prices and reviews take `pagination.limit` and `pagination.offset` (reviews at most 20 a page). Flight results are not paged" }, { "label": "MCP server", "value": "Exists, by invitation case by case. No public endpoint, tool list or docs beyond one page" }, { "label": "SDKs", "value": "None current. The `skyscanner` package on PyPI is from April 2020 and targets the earlier API. A Postman collection is linked from the flights docs" }, { "label": "Usage rules", "value": "Live calls only on a user's request with exact dates, a Powered by Skyscanner logo, and deep links served unchanged" }, { "label": "Status and SLA", "value": "No status page or SLA found" }, { "label": "Security", "value": "Public bug bounty on Bugcrowd, vulnerability disclosure policy, security.txt valid to 2030-11-20" } ], "provenance": { "legalEntity": "Skyscanner Limited", "domain": "skyscanner.net", "domainRegistered": "2002-07-03", "endpointOnVendorDomain": true, "terms": "", "privacy": "https://www.skyscanner.net/media/privacy-policy", "statusPage": "", "changelog": "https://developers.skyscanner.net/docs/change-log", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The privacy policy and terms of service name Skyscanner Limited, company number 04217916, registered in England and Wales.", "No `terms` URL is given. The partner help centre says the Skyscanner API Terms and Conditions are in the partner's contract on impact.com, and the only public terms are the website terms of service at https://www.skyscanner.net/media/terms-of-service.", "The privacy policy is Skyscanner's general one for its platforms and travellers. No separate privacy notice or DPA for API partners was found.", "The API answers at partners.api.skyscanner.net. Deep links pass through skyscanner.pxf.io, an Impact tracking domain.", "https://www.skyscanner.net/.well-known/security.txt lists security@skyscanner.net and the Bugcrowd programme and expires 2030-11-20. The same path returns 403 on developers.skyscanner.net and 404 on www.partners.skyscanner.net.", "No status page is linked from the developer docs or the partner site. Requests to status.skyscanner.net did not connect from our network.", "RDAP for skyscanner.net gives a registration date of 2002-07-03." ], "score": 76, "checks": [ { "check": "Legal entity named", "value": "Skyscanner Limited", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "skyscanner.net, registered 2002-07-03 (24 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "partners.api.skyscanner.net", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Privacy policy", "value": "read, states 5 of the 8 things a reader expects, and has 1 clause that costs points", "points": 5.8, "max": 10, "state": "part" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "valid", "points": 10, "max": 10, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "", "state": "none-found", "points": 0, "max": 10 }, { "kind": "privacy", "url": "https://www.skyscanner.net/media/privacy-policy", "state": "read", "readAt": "2026-10-08", "words": 5955, "points": 5.8, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": false }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "Along with our Cookie Policy and Terms of Service, this Privacy Policy (the “Policy”) explains how we collect and handle your information across all of the Skyscanner services, including the mobile app and the Skyscanner website, and other services such as our customer service or user research channels (together, the…" }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We keep personal data only for as long as we need to." }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "When is personal data shared with or collected by third parties?" }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": false }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": false }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "You can exercise these rights by visiting our \"Make a Data Privacy Request\" page or by writing to our Data Protection Officer at Skyscanner, Quartermile One, 15 Lauriston Place, Edinburgh EH3 9EN.", "says": "Names a data protection officer" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "…data is adequately protected in that location, most often by applying European Commission-approved standard contractual clauses or relying on the relevant third party's approved Binding Corporate Rules.", "says": "Relies on standard contractual clauses" } ], "toKnow": [ { "key": "training", "label": "Says it may use customer content to train or improve models, and no opt-out was found", "found": true, "quote": "To make sure that our personalisation and search results are as relevant and helpful as possible, we use personal data to train our machine learning algorithms (for example, in providing relevant car hire results based on the driver age-range you provide).", "costsPoints": true }, { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "Depending on the Platform you are using and the privacy choices you make, certain information may be collected from you by third parties such as advertisers, marketing networks and affiliates using cookies and similar technologies." } ], "notes": [ { "date": "2026-10-08", "text": "Skyscanner uses security and fraud prevention providers to identify automated software agents that might disrupt its services or misuse its APIs.", "quote": "For example, we use these providers to identify automated software agents that might disrupt our services or to prevent misuse of our APIs;" }, { "date": "2026-10-08", "text": "Automated fraud and security decisions may lead Skyscanner or a travel provider to block a booking or purchase.", "quote": "For these purposes, we might make automated decisions about you which may result in us or the relevant Travel Provider blocking your booking or purchase." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/skyscanner.json", "live": { "slug": "skyscanner", "probe": { "target": "https://partners.api.skyscanner.net", "method": "get", "lastAt": "2026-10-08T21:12:21.721422508Z", "lastOk": true, "lastStatus": 404, "lastMs": 70, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 73, "p95ms24h": 100, "samples24h": 21, "samples30d": 21, "days": [ { "date": "2026-10-08", "probes": 21, "ok": 21 } ] }, "updatedAt": "2026-10-08T21:12:21.721422508Z" } } }