Every public operation in the contract, grouped by family. Console-only operations are not listed here.
5662646410aba3d66d6fefe5…7e3e103495971820488349da…ef5712134b28f198f4c8331e…SHA256SUMSCheck a download with sha256sum -c SHA256SUMS.
https://apiq-sandbox.tripproagencysites.comProducts and operations your tenant can call: GET /v1/capabilities
Search every product, poll for results, and read offer detail, schedules, seat maps, fare rules and ancillaries.
Confirm an offer's current price and hold it for a while before booking.
Book an offer, then read, change and cancel the order.
Pay for an order with a card tokenized by the payment provider, and confirm the payment.
Reference data and static content: places, airports and other lookups, and what each product supports today.
Sign in, refresh and end sessions, read the signed-in caller, and create, rotate and revoke API keys; these routes take and answer plain JSON, not the travel envelope.
The public discovery documents an agent reads before it holds any credential: the signed onboarding manifest and the key set that verifies it.
Register and remove the push-notification devices of a signed-in person's mobile apps; a human session only, never an API key.
Your commercial configuration: the markup rules applied to every price your customers see, versioned and simulated before you publish them.
Send a lead to a supplier that takes enquiries instead of bookings; nothing is priced, held or paid.
Your prepaid wallet, one per settlement currency: its balance, its movements and top-ups.
Subscribe to webhooks and replay the events your account has received.
Proposals an AI agent submits for a signed-in person to approve or reject; an agent proposes, a person commits.
Read-only travel data such as flight emissions and status, ratings, weather, holidays and entry requirements; it never blocks a booking.