Demo: Orbit Travel API
Download OpenAPI DocumentSearch destinations, flights and seat maps, book and pay, manage saved passengers and Orbit Miles, and receive booking and payment events by webhook or from the Events API.
Every request needs an API key in the x-api-key header, or an OAuth access token from Create an access token in Authorization: Bearer …. Each credential can make 60 requests a minute.
Authentication
Create an access token
Destinations
List destinations
Get a destination
Flights
Search flights
Get a flight
Legacy flight searchDeprecated
Seats
Get a seat map
Hold seats
Create a booking
List bookings
Get a booking
Update a booking
Cancel a booking
Upload a travel documentbeta
Attaches a travel document (passport or visa scan) to a booking.
Path Parameters
Booking id.
Bodyrequiredmultipart/form-data
Passport or visa scan (PDF, PNG or JPEG, up to 10 MB).
Responses
201Created
Where the booking is in its life.
Cabin booked.
When the booking was created.
Booking id.
Flight booked.
Everyone travelling.
Show child attributes
Full name as on the travel document.
Contact email for boarding updates.
Total charged, in cents.
ISO 4217 currency code.
Travel documents uploaded for this booking.
Seat numbers, one per passenger in the same order. Empty until seats are chosen with Update a booking.
Your reference, if you sent one.
Requests allowed per minute for this credential.
Requests left in the current window.
When the window resets, in Unix seconds.
400The request is invalid: a parameter or body field failed validation.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
401Authentication is missing or invalid.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
403Authenticated, but not allowed to do this.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
404No booking with this id.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
429Too many requests: more than 60 a minute. Wait `Retry-After` seconds, then retry.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
Seconds to wait before retrying.
Requests allowed per minute for this credential.
Requests left in the current window.
When the window resets, in Unix seconds.
500Something failed on the server. Retry with backoff.
HTTP status code, repeated in the body.
What went wrong, for people. Validation failures list one entry per problem. Do not branch on this text.
Short name of the status.
curl http://localhost:3010/v1/bookings/bk_7Hq2xP/documents \
--request POST \
--header 'x-api-key: YOUR_API_KEY' \
--form 'file='{
"status": "confirmed",
"cabin": "economy",
"createdAt": "2026-10-03T12:00:00Z",
"id": "bk_7Hq2xP",
"flightId": "flt_2031_proxima",
"passengers": [
{
"name": "Ada Lovelace",
"email": "ada@example.com"
}
],
"totalAmount": 2599800,
"currency": "USD",
"reference": "order-8812",
"documents": [
"passport-ada.pdf"
],
"seats": [
"24A",
"24B"
]
}