The best place to learn the Medallia APIs is by invoking them in a sandbox environment deployed by your Customer administrator. Changes to the sandbox environment do not affect the production environment, thereby preventing unintended changes of production data.

OAuth endpoints

Before making an API call, you will need to get an OAuth token. For detailed information, see Authenticating APIs with OAuth.

API host

The API host to sandboxes follows this pattern for all sandboxes: https://<sandbox-name>-<company-name>.apis.sbx.<data-center>.medallia.<region>.

To learn the <company-name>, <data-center>, and <region> (where the region for U.S. instances is .com), see Medallia IP addresses and hostnames for <data-center> identifiers.

Note too that some instances repeat the <company-name>, in which case the URL looks more like this: https://<sandbox-name>-<company-name>-<company-name>.apis.sbx.<data-center>.medallia.<region>.

For more information about the API URLs, see API hosts.

Limited number of API calls

Medallia limits the number of API calls per company to prevent unintended bugs in API client code or malicious code from taking down production systems. API calls are designed to avoid disrupting the users who access Medallia Experience Cloud reports all day. A developer need not be concerned with the mechanics of these protections but should be familiar with the control parameters.

Medallia limits APIs calls for testing purposes to no more than 100 calls per month. You can check your call limit by invoking the APIs for Call limits. See the section titled API limits.