---
title: Guesty API calls and credential security
description: All Guesty API calls are made from the HomeRunner central server. Your website never holds your Guesty credentials and never exposes them to visitors…
url: "https://homerunner.io/docs/where-are-guesty-api-calls-made-from-in-homerunner-and-are-credentials-ever-expo/"
updated: "2026-10-26"
category: PMS connections and sync
---

# Guesty API calls and credential security

All Guesty API calls are made from the HomeRunner central server. Your website never holds your Guesty credentials and never exposes them to visitors browsing your site.

Still stuck? [Contact the HomeRunner team](https://homerunner.io/contact/) with your site address and what you tried, and we take it from there.