Changelog

The API is versioned in the URL (/api/v1). Within a major version we only make backwards-compatible changes (new endpoints, new optional fields, new enum values). Breaking changes ship as a new version with advance notice.

v2.0.0

New version at /api/v2; v1 is unchanged. See API v2.

• Live flight and hotel inventory (when the platform has a supplier connected), with source: "live" | "simulated" on every search.
• /air/* and /hotels/*: search, rooms, revalidate, fare rules, and booking with full traveller details and automatic fare confirmation (409 fare_changed).
• Account-aware pricing: agencies get net, sell price and commission; corporates get base, tax and fee.
• Agency wallet bookings (402 insufficient_credit), refunds on cancel, GET /wallet and GET /wallet/ledger.
• Corporate endpoints: employees, cost centres, policies, approvers, spend by cost centre; bookings can carry employee, cost centre, purpose and approver, with approval-threshold checks.
• Unified /bookings (filter by status and type) with ticket status.
• New scopes: wallet:read, corporate:read.
• Agency and corporate portals can create, edit, rotate and revoke their own keys and webhooks when the platform enables self-service for the client.
• OpenAPI 3.1 at /api/v2/openapi.json.

v1.0.0

Initial release.

• Search: flights (one-way and round trip), hotels, cars. Simulated inventory.
• Pricing quote endpoint. Margin folded into baseAmount; tax and fee shown separately.
• Bookings: create (idempotent), list, get, cancel.
• Invoices: list and get, with payments.
• Webhooks: booking.created, booking.cancelled, invoice.paid, signed with HMAC-SHA256, retried with backoff.
• API keys with scopes, per-key rate limits, IP allow-lists, expiry; optional HMAC request signing.
• Live and test (sandbox) keys.
• Platform-administrator controls: per-client suspension, per-scope and global kill switches, usage and delivery logs.
• OpenAPI 3.1 at /api/v1/openapi.json.