FlightAPI Developer Portal

Server-to-server API documentation for approved B2B clients. Clients authenticate with their assigned subscription key and must call from authorized source IP addresses.

Supplier credentials, supplier endpoints, provider tokens and internal traces are never exposed to API clients.

Authentication

Send the subscription key assigned to the B2B agent. IP whitelist rules are enforced separately by the gateway.

headers

X-API-KEY: <your-subscription-key>
Content-Type: application/json

POST/api/v1/flights/search

Flight Search

Search one-way or round-trip itineraries using the unified FlightAPI request format.

Status Codes

200 Success400 Invalid Request401 Invalid API Key403 IP Not Whitelisted / Provider Not Allowed429 Rate Limit503 Supplier Unavailable

Example Request

json

{
  "tripType": "ONE_WAY",
  "origin": "ISB",
  "destination": "DXB",
  "departureDate": "2026-09-20",
  "passengers": {
    "adults": 1,
    "children": 0,
    "infants": 0
  },
  "cabin": "ECONOMY",
  "currency": "PKR"
}

Try It

Runs through the Admin server using the configured test API key.

POST/api/v1/flights/revalidate

Fare Revalidation

Revalidate a selected FlightAPI offer before booking.

Status Codes

200 Success400 Invalid Request401 Invalid API Key403 IP Not Whitelisted503 Supplier Unavailable

Try It

Runs through the Admin server using the configured test API key.

POST/api/v1/flights/book

Create Booking

Create a booking using the standardized FlightAPI booking schema.

Status Codes

200 Success400 Invalid Request401 Invalid API Key403 IP Not Whitelisted503 Supplier Unavailable

Try It

Runs through the Admin server using the configured test API key.

POST/api/v1/flights/ticket

Issue Ticket

Issue an eligible booking through FlightAPI.

Status Codes

200 Success400 Invalid Request401 Invalid API Key403 IP Not Whitelisted503 Supplier Unavailable

Try It

Runs through the Admin server using the configured test API key.

Error Handling

FlightAPI returns structured JSON errors without exposing supplier credentials.

json

{
  "success": false,
  "code": "PROVIDER_NOT_ALLOWED",
  "message": "No flight provider is enabled for this client.",
  "data": null,
  "meta": {}
}