Demo: Orbit Travel API
Download OpenAPI DocumentSearch destinations, flights and seat maps, book and pay, manage saved passengers and Orbit Miles, and receive booking and payment events by webhook or from the Events API.
Every request needs an API key in the x-api-key header, or an OAuth access token from Create an access token in Authorization: Bearer …. Each credential can make 60 requests a minute.
Authentication
Create an access token
Destinations
List destinations
Get a destination
Flights
Search flights
Get a flight
Legacy flight searchDeprecated
Seats
Get a seat map
Hold seats
Create a booking
List bookings
Get a booking
Update a booking
Cancel a booking
Upload a travel documentbeta
List travel documents
Download a boarding pass
Create a passenger
List passengers
Get a passenger
Update a passenger
Delete a passenger
Pay for a booking
Get a payment
Refund a payment
Returns money to the customer, all of it or part. Refund several times until the payment is fully refunded. Refunding does not cancel the booking; cancel it first if the customer is not flying.
Path Parameters
Payment id.
Bodyrequiredapplication/json
Why you are refunding.
Amount to refund, in cents. Defaults to everything not yet refunded.
Responses
201Created
Why the money went back.
Bank transfer refunds stay pending for a few days.
When the refund was created.
Refund id.
Payment refunded.
Amount refunded, in cents.
ISO 4217 currency code.
Requests allowed per minute for this credential.
Requests left in the current window.
When the window resets, in Unix seconds.
400The request is invalid: a parameter or body field failed validation.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
401Authentication is missing or invalid.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
403Authenticated, but not allowed to do this.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
404No payment with this id.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
409The payment has not succeeded, or is already fully refunded.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
422`amount` is more than what is left to refund.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
429Too many requests: more than 60 a minute. Wait `Retry-After` seconds, then retry.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
Seconds to wait before retrying.
Requests allowed per minute for this credential.
Requests left in the current window.
When the window resets, in Unix seconds.
500Something failed on the server. Retry with backoff.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
curl http://localhost:3010/v1/payments/pay_3kTq9Z/refunds \
--request POST \
--header 'x-api-key: YOUR_API_KEY' \
--header 'Content-Type: application/json' \
--data '{
"reason": "requested_by_customer",
"amount": 50000
}'{
"reason": "requested_by_customer",
"status": "succeeded",
"createdAt": "2026-10-05T10:00:00Z",
"id": "re_c81Hq0",
"paymentId": "pay_3kTq9Z",
"amount": 1299900,
"currency": "USD"
}