API referenceenquiries
Create enquiry
POST
/v1/enquiriesIdempotency-Key requiredAccepts X-Api-Key · oauthClientCredentials · bearer
Send a lead to a lead-only supplier: private dining and other enquiries
An enquiry is a lead, not a booking: nothing is priced, held or paid, and no order is created.Show more
An enquiry is a lead, not a booking: nothing is priced, held or paid, and no order is created. The platform validates the lead the way the supplier would, sends it ONCE and answers the enquiry with its state. SUBMITTED carries the supplier's lead id as supplierReference; UNCONFIRMED means the supplier did not answer, the lead may have reached the venue and is never re-sent (warning <SUPPLIER>_LEAD_UNCONFIRMED). Requires orders:write and the domain tab entitlement (search:dining for FNB). Idempotency-Key is required; a replay answers the stored 201. Personal data in contact travels to the supplier and is never echoed.Headers
- TeststringOptional
Sandbox scenario simulation: price_changed | sold_out | ambiguous | hold_expired | payment_declined | supplier_timeout | partial_search | duplicate_order (case-insensitive).Show more
Sandbox scenario simulation: price_changed | sold_out | ambiguous | hold_expired | payment_declined | supplier_timeout | partial_search | duplicate_order (case-insensitive). Read on every travel verb before the permission wall and idempotency; a scenario sent on a verb it does not apply to has no effect. Every simulated error carries details.simulated true and details.scenario. price_changed (reprice, hold, orders) → 409 PRICE_CHANGED; sold_out → 422 SOLD_OUT; hold_expired (orders) → 409 HOLD_EXPIRED; duplicate_order (orders) → 409 DUPLICATE_ORDER existingOrderRef MO-SIM-DUPLICATE; payment_declined (orders, POST /v1/payments/{paymentId}/confirm) → 402 PAYMENT_FAILED; supplier_timeout → 502 UPSTREAM_UNAVAILABLE; partial_search (search) → two SUPPLIER_DROPPED warnings; ambiguous (orders) → 202 PENDING_RECONCILIATION on an MO-SIM- ref. wallet_insufficient → 402 PAYMENT_FAILED details.reason WALLET_INSUFFICIENT. - Idempotency-KeystringRequired
Mandatory on mutations: **48h TTL**; replay with same body-hash returns the original response with Idempotency-Replayed true; same key + different body is 409 IDEMPOTENCY_CONFLICT; in-flight duplicate…Show more
Mandatory on mutations: **48h TTL**; replay with same body-hash returns the original response with Idempotency-Replayed true; same key + different body is 409 IDEMPOTENCY_CONFLICT; in-flight duplicate is 409 IDEMPOTENCY_IN_PROGRESS.
Request body
- contextMondeeContextRequiredRequest context envelope. domain selects the product; URL carries the verb.
13 child attributes
- domainstringRequired
Canonical code or alias per the domain registry; unknown = 400 UNKNOWN_DOMAIN.Show more
Canonical code or alias per the domain registry; unknown = 400 UNKNOWN_DOMAIN. APTSVC (airport services: meet and assist, porter, buggy, wheelchair, concierge bundles) is registered by this release beside FASTTRK. FNB (dining: restaurant reservations; aliases REST, DINING, RESTAURANT, RESTAURANTS; category DO, money model FREE, artifact CONF_NUMBER, served under the dining service key with base path /v1/dining) is registered since v1.7.0. GIFT (gift cards; category SUPPORT, money model MERCHANT, artifact VOUCHER, served under the gift-cards service key with base path /v1/gift-cards) is described from v1.31.0: until the backend seam change merges, domain GIFT answers 400 UNKNOWN_DOMAIN. AICONT (the Example Content experience-scraping service's operations; category DO, money model MERCHANT, artifact NONE, served under the aicont service key with base path /v1/aicont; a content supplier) has its typed intent from v1.39.0; it answers only where its supplier set is landed and ACTIVE. PARK (airport and cruise-port parking; aliases PRK and PARKING; category SUPPORT, money model MERCHANT, artifact CONF_NUMBER — the supplier's gate barcode is the order's BARCODE document — served under the parking service key with base path /v1/parking) has its typed intent and its verb book from v1.55.0. - actionstringOptionalMirrors the verb; optional (server sets from route)
- enricharray of stringOptional
Opt-in enrichment on shopping answers: EMISSIONS | RATINGS | AMENITIES | ROUTE.Show more
Opt-in enrichment on shopping answers: EMISSIONS | RATINGS | AMENITIES | ROUTE. Absent = the tenant's configured default. Decoration reads cache or the pre-warmed store only and never delays the verb. - session_idstringOptionalYour own id for the user session the call belongs to.
- transaction_idstringOptionalConstant across one shop-to-book journey
- currencystringOptionalISO-4217; absent = tenant default; blank/invalid = 400
- localestringOptionalThe language and region for text in the answer, as a BCP 47 tag (for example en-US).
- posstringOptionalPoint-of-sale market, orthogonal to tenant
- clientReferencestringOptionalCaller's own id; searchable; the reconciliation primitive
- fareSourcePolicystringOptionalBYOC tenants only; narrows, never widens, the configured strategy
- DEFAULT
- OWN_ONLY
- MONDEE_ONLY
- BLEND
- includeUpstreambooleanOptionalDefault false
Ask for the supplier's own answer, verbatim, beside what the platform read from it: Offer.upstream on every offer of a search, poll, detail or flight-returns answer, AirReturnOption.upstream on each…Show more
Ask for the supplier's own answer, verbatim, beside what the platform read from it: Offer.upstream on every offer of a search, poll, detail or flight-returns answer, AirReturnOption.upstream on each listed return, RepriceResponse.message.upstream and OrderItem.upstream. Served only where the deployment enables upstream pass-through; elsewhere a true value is 400 VALIDATION details.reason UPSTREAM_PASS_THROUGH_DISABLED, details.field context.includeUpstream, before any supplier call. Absent or false, nothing changes. The block is informational: offerRef, repriceRef and price stay the only handles and the only price of record. - selectionSelectionPreferencesOptional
context.selection: the caller's offer-selection preferences for this search.Show more
context.selection: the caller's offer-selection preferences for this search. Each field set here replaces the tenant's and the platform's for this search, within the caller's entitlements and the platform's ceilings, unless the tenant has locked request overrides. It never widens reach: a preferred supplier the caller may not reach is ignored with context.warnings[] SELECTION_PREFERENCE_IGNORED. Ignored where selection is off.4 child attributes
- viewstringOptionalSELECTED (one entry per item, alternatives under the winner) or ALL (the flat list, tagged)
- SELECTED
- ALL
- objectivestringOptional
How the winner of an item is picked. CHEAPEST is the lowest comparison total; REFUNDABLE_FIRST the lowest total among offers free to cancel now (else CHEAPEST); PREFERRED_SUPPLIERS the first of…Show more
How the winner of an item is picked. CHEAPEST is the lowest comparison total; REFUNDABLE_FIRST the lowest total among offers free to cancel now (else CHEAPEST); PREFERRED_SUPPLIERS the first of preferSuppliers with an offer inside the tenant's preference band (else CHEAPEST); PLATFORM_DEFAULT defers to the tenant and platform policies. Any other value is 400 VALIDATION details.field context.selection.objective.- CHEAPEST
- REFUNDABLE_FIRST
- PREFERRED_SUPPLIERS
- PLATFORM_DEFAULT
- preferSuppliersarray of stringOptionalSupplier codes as in fareSource.supplier, most preferred first (PREFERRED_SUPPLIERS)
- excludeSuppliersarray of stringOptionalSupplier codes whose offers this search does not show; narrows only
- onBehalfOfOnBehalfOfOptional
Who a desk or agent books FOR: stamped into the audit actor and the clientReference lineage of the order.Show more
Who a desk or agent books FOR: stamped into the audit actor and the clientReference lineage of the order. Send customerId (a customer or traveller id the tenant knows) or traveler (a free-text identity), or both. Attribution only: it grants nothing, and the credential's own actor is still what authorises the call. Audit mapping: the audit actor.onBehalfOf (a string) is customerId when present, otherwise "traveler:<redacted-hash>" (a stable hash of traveler, never the text).2 child attributes
- customerIdstringOptionalA customer or traveller id your own system knows.
- travelerstringOptional
Free-text traveller identity when there is no customer id.Show more
Free-text traveller identity when there is no customer id. Personal data: it is logged redacted, never in clear. A card number in it is 400 VALIDATION details.reason INSTRUMENT_DATA_REFUSED.
- messageobjectRequiredThe request: `message.intent` is the lead.
1 child attribute
- intentEnquiryIntentRequired
The lead. productId names the venue (for FNB the restaurant id).Show more
The lead. productId names the venue (for FNB the restaurant id). contact is personal data: it travels to the supplier's lead call and is never echoed; the enquiry record keeps it encrypted for the tenant's retention period. eventType is the supplier's documented vocabulary; for Example Dining: Anniversary, BabyShower, BarMitzvah, Birthday, BridalWeddingShower, CharityEvent, Class, CocktailParty, Conference, CorporateEvent, DinnerParty, Engagement, FilmingLocation, Fundraiser, Graduation, HolidayEvent, LaunchParty, Meeting, Other, PrivateDining, RehearsalDinner, SocialEvent, SpecialOccasion, WeddingReception. An unknown type, a date that is not in the future or a missing phone is 400 VALIDATION before anything is sent (details.reason <SUPPLIER>_LEAD_INVALID, details.invalid lists the fields).8 child attributes
- productIdstringRequiredThe venue the lead is for (for dining, the restaurant id).
- contactobjectRequiredWho the venue should contact; personal data, sent to the venue and never echoed back.
4 child attributes
- firstNamestringRequiredFirst name of the contact.
- lastNamestringRequiredLast name of the contact.
- emailstring · emailOptionalEmail address of the contact.
- phoneNumberstringRequiredE.164
- eventDatestring · dateRequiredDate of the event, in the future.
- eventTimestringRequiredStart time of the event, 24-hour HH:MM, local to the venue.
- partySizeintegerRequiredHow many guests.
- eventTypestringRequiredThe kind of event, from the venue's list (for example Birthday or CorporateEvent).
- flexibleDatebooleanOptionalTrue when another date near eventDate would also work.
- clientReferencestringOptionalYour own reference for the lead, returned on the enquiry.
Responses
- 201The enquiry, SUBMITTED or UNCONFIRMEDEnquiryResponse
- 400ApiErrorResponse
VALIDATION or UNKNOWN_DOMAIN. A lead the supplier would refuse is refused before anything is sent: details.reason <SUPPLIER>_LEAD_INVALID with details.invalid naming the fields; a domain whose…Show more
VALIDATION or UNKNOWN_DOMAIN. A lead the supplier would refuse is refused before anything is sent: details.reason <SUPPLIER>_LEAD_INVALID with details.invalid naming the fields; a domain whose suppliers take no enquiries is details.reason ENQUIRY_NOT_SUPPORTED; a card number in any text field is details.reason INSTRUMENT_DATA_REFUSED. - 401ApiErrorResponse
UNAUTHENTICATED — missing or expired token.Show more
UNAUTHENTICATED — missing or expired token. Declared on every operation because `security` is declared globally at the document root: every route is authenticated, so every route can answer 401. - 403ApiErrorResponse
AGENT_TIER_INSUFFICIENT, also 403, is a request whose agent tier does not allow the tool class; it carries nextAction verify_agent and details.tier, details.required, details.toolClass and…Show more
AGENT_TIER_INSUFFICIENT, also 403, is a request whose agent tier does not allow the tool class; it carries nextAction verify_agent and details.tier, details.required, details.toolClass and details.operationId. A ceiling only narrows an unverified caller and never widens a scope. - 405ApiErrorResponse
VALIDATION — the public edge serves GET, POST, PUT, PATCH and DELETE only; any other method is refused before the platform sees it (details.reason METHOD_NOT_ALLOWED, details.source edge).Show more
VALIDATION — the public edge serves GET, POST, PUT, PATCH and DELETE only; any other method is refused before the platform sees it (details.reason METHOD_NOT_ALLOWED, details.source edge). Not retryable as sent. - 409IDEMPOTENCY_CONFLICT | IDEMPOTENCY_IN_PROGRESS — the only 409s of a mutation with no domain conflictApiErrorResponse
- 413ApiErrorResponse
VALIDATION — the request body is larger than the surface's limit.Show more
VALIDATION — the request body is larger than the surface's limit. Not retryable as sent: shrink the body. Declared on every operation that takes a request body. details carries exactly one key, maxBodyBytes (integer): the limit that applies to this surface, in bytes. - 414ApiErrorResponse
VALIDATION — the request URI (path and query string) is longer than 8 KiB; the public edge refuses it before the platform sees it (details.reason URI_TOO_LONG, details.source edge).Show more
VALIDATION — the request URI (path and query string) is longer than 8 KiB; the public edge refuses it before the platform sees it (details.reason URI_TOO_LONG, details.source edge). Not retryable as sent: send long input in the body of a POST. - 415ApiErrorResponse
VALIDATION — a request body that is not JSON (application/json or application/*+json; a form body only on the OAuth token routes).Show more
VALIDATION — a request body that is not JSON (application/json or application/*+json; a form body only on the OAuth token routes). The public edge refuses it before the platform sees it (details.reason UNSUPPORTED_MEDIA_TYPE, details.source edge). Not retryable as sent: send Content-Type application/json. Declared on every operation that takes a JSON request body. - 429ApiErrorResponse
RATE_LIMITED — the API key or its tenant is over a rate limit; wait for Retry-After, then retry.Show more
RATE_LIMITED — the API key or its tenant is over a rate limit; wait for Retry-After, then retry. Every routed request is counted against two token buckets, the key's and the tenant's (all its keys together): 50 requests a second with a burst of 100 on the standard plan. Every travel verb except polling a search also spends from a supplier budget, per key and per tenant: 10 requests a second with a burst of 20, and a plan may add a daily quota of supplier calls. Answers carry the IETF RateLimit header fields for the tightest bucket consulted (RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, RateLimit-Policy); a refusal adds Retry-After and details.scope (KEY or TENANT), details.budget (PLATFORM or SUPPLIER), details.reason (RATE or DAILY_QUOTA), details.tier and details.retryAfterMs. A sandbox may run with the limiter off, in which case none of these headers is sent. A search that is still warming is a different answer with a different meaning (keep polling). with the key-velocity check on, also details.reason VELOCITY_LIMIT, a soft breach of the API key's own scope (components/responses/VelocityLimited), nextAction slow_down. - 500INTERNAL — a bug, and traceId is the support handle.ApiErrorResponse
- 502Also the order read routes (getOrder, listOrderDocuments, listOrderEvents, searchOrders) when the order store times out: details.store names the store, retryable true.ApiErrorResponse
- 503ApiErrorResponse
Errors you should handle
Branch on code and honour retryable — never on the HTTP status alone.
| 400 | VALIDATION Example Dining requires the guest names and phone, a future date, a time, a party of at least one and a documented event type. | not retryable |
| 400 | UNKNOWN_DOMAIN Unknown domain 'DINNER'. Did you mean FNB? | not retryable |
| 401 | UNAUTHENTICATED The bearer token is expired. Re-authenticate and retry. | not retryable |
| 403 | PERMISSION_DENIED Role lacks the required scope: booking:write | not retryable |
| 403 | TAB_DISABLED Tenant acme-travel is not entitled to sell CRU | not retryable |
| 403 | OUT_OF_SCOPE The token's scope ladder does not reach this customer subtree | not retryable |
| 403 | TENANT_MISMATCH orderRef MO-8KD-2FQ-9XT does not belong to tenant acme-travel | not retryable |
| 405 | VALIDATION This method is not served. | not retryable |
| 409 | IDEMPOTENCY_CONFLICT Idempotency-Key 7f0c33d1-9a1e-4d2c-9f77-1c0f2b3a4d55 was used with a different body; never executed | not retryable |
| 409 | IDEMPOTENCY_IN_PROGRESS A request with this Idempotency-Key is still executing | retryable |
| 413 | VALIDATION The request body is larger than this API accepts (262144 bytes). | not retryable |
| 414 | VALIDATION The request URI is longer than 8 KiB. | not retryable |
| 415 | VALIDATION Send application/json. | not retryable |
| 429 | RATE_LIMITED Too many requests for this key on the supplier budget. Wait for the Retry-After interval before trying again. | retryable |
| 500 | INTERNAL An unexpected error occurred. Quote the traceId to support. | retryable |
| 502 | UPSTREAM_UNAVAILABLE Every supplier for HTL is circuit-open; no fan-out was attempted | retryable |
| 503 | PROVIDER_DOWN EXAMPLEHOTELS is unavailable; the order was not attempted and nothing was captured | retryable |