Skip to main content

​
Timeouts

​
Retries

Retry only the codes marked retryable in Errors, with exponential back-off. Never retry create order automatically.

​
Correlation ids

Send your own X-Correlation-Id on every call. Your booking reference works well. Letters, digits and . _ : - are allowed, up to 64 characters. It’s echoed back, and generated for you if you leave it out. Log the one you receive: support will ask for it.

​
Tokens

One token per integration, refreshed before expiry, kept in a secret store. A 401 on any call means authenticate once and retry. See Authentication.

​
Passenger data

Passport numbers and birth dates are personal data. Send them only over TLS, don’t log request bodies, and keep them only as long as your policy requires.

​
Prices

Always display price.total from the latest response you have (details, change-options or the order), and re-confirm with the customer on FLIGHT_PRICE_CHANGED.

​
Holds

Count down an on-hold order with hold.expiresAt − hold.serverTime, never against your own clock. Re-read the order until hold.isFinal is true. See On-hold bookings.

​
Wallet

Watch your balance. issue fails with HTTP 402 when the wallet can’t cover the order.

​
Search caching

Cache results on your side for repeated identical queries. It keeps you under the search rate limit and gives customers faster pages.