All access to the MLS IDX API requires authentication using digest authentication (RFC 2617, HTTP Authentication).
- Login Requirement
A client must issue a Login request before making any other request. The Login transaction validates the provided credentials and initiates a session. - Session Management
Once authenticated, session control may be handled through HTTP cookies or other supported methods. Clients must support at least session control via cookies. - Credentials
Each registered MLS IDX API user is assigned unique authentication credentials when their data feed is set up. These credentials identify the user and grant access to all property, agent, and office data available to them. - Subsequent Requests
All requests for Metadata, Search, GetObject, and Logout must include both the Digest Authentication authorization header and the active session cookie.