Flavoso APIAPI-ReferenzReservierungen
Reservierungen
Reservierungen lesen, freie Zeiten abfragen, anlegen, ändern und durch ihre Stände führen. Ab dem Tarif Pro. Mehr dazu unter Reservierungen.
Endpunkte
List reservations
get/reservations
- Recht:
reservations:read- Tarif:
- ab Pro
Same paging and polling rules as GET /orders: newest change first, or ascending with updated_since (poll with a minute of overlap and deduplicate by id + updated_at).
With starts_from and/or starts_until (tonight, this week) the list is sorted by starts_at ascending instead. Deleted reservations are never listed. Pro plan and up (plan_required otherwise).
Parameter
| Name | Ort | Beschreibung |
|---|---|---|
statusstring | query | Comma-separated: pending, confirmed, declined, seated, done, cancelled, no_show. |
updated_sincestring (date-time) | query | Only reservations changed after this instant (exclusive; ISO 8601 with time zone, write + as %2B in a URL). Poll with an overlap, as for orders. |
starts_fromstring (date-time) | query | Only reservations starting at or after this instant (ISO 8601 with time zone; write + as %2B in a URL). Sorts by starts_at. |
starts_untilstring (date-time) | query | Only reservations starting before this instant (exclusive). Sorts by starts_at. |
limitinteger | query | Page size, 1 to 100. Default 25.1 to 100 · default 25 |
cursorstring | query | next_cursor of the previous page. Opaque; send the same filters again with it. |
Antwort200
OK
objectstringPflichtAlways
list.Werte:
"list"dataReservation[]PflichtThe items of this page.
Felder darin (14)
objectstringPflichtAlways
reservation.Werte:
"reservation"idstring (uuid)PflichtThe reservation.
codestringPflichtShort code the guest sees.
statusstringPflichtpendingis a request the restaurant still has to confirm.Werte:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)PflichtStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerPflichtHow long the table is held.
party_sizeintegerPflichtNumber of guests.
table_idsstring (uuid)[]PflichtAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringPflichtBooked online by the guest, by the restaurant's staff, or through this API.
Werte:
"guest""staff""api"guest_namestringPflichtkann null seinThe guest's name.
notestringPflichtkann null seinThe guest's wish.
created_atstring (date-time)PflichtWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)PflichtLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)Pflichtkann null seinOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
has_morebooleanPflichtWhether another page follows.
next_cursorstringPflichtkann null seinPass as
cursor(with the same filters) to get the next page; null on the last page.
Fehler
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl "https://api.flavoso.com/v1/reservations" \
-H "Authorization: Bearer $ACCESS_TOKEN"{
"object": "list",
"data": [
{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "confirmed",
"starts_at": "2026-10-09T17:30:00.000Z",
"duration_minutes": 90,
"party_size": 4,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}
],
"has_more": false,
"next_cursor": null
}Create a reservation
post/reservations
- Recht:
reservations:write- Tarif:
- ab Pro
Books a table for the restaurant, like the restaurant's own staff would: all tables count (also those not bookable online), there is no lead time and no booking horizon, and online reservations need not be switched on. Unlike staff, your app cannot overbook: starts_at must be one of the times GET /reservations/availability offers for that day, and a table must be free for the party (or the table_ids you send). Otherwise 409 slot_unavailable.
status is confirmed (default) or pending (the restaurant confirms). With guest_email the guest receives the confirmation (or, for pending, the request) e-mail in guest_locale (default: the restaurant's language), unless notify_guest is false. The restaurant's staff is not notified, as with a booking they make themselves. Produces reservation.created; source is api.
Parameter
| Name | Ort | Beschreibung |
|---|---|---|
Idempotency-Keystring | header | Any unique string up to 255 printable characters. Retrying a POST with the same key returns the first response (header Idempotent-Replayed: true) instead of acting twice; the same key with a different body is 422 idempotency_key_reused. Kept for 24 hours. Answers that ask for a retry (5xx, 409 conflict) are not kept. While the first request runs, a retry gets 409 idempotency_in_progress; a first request that never finished frees the key after 2 minutes.max 255 chars |
Rumpfapplication/json
starts_atstring (date-time)PflichtStart, ISO 8601 with time zone; one of the times
GET /reservations/availabilityoffers.party_sizeintegerPflichtNumber of guests.
1 to 200
guest_namestringPflichtThe guest's name.
max 120 chars
guest_phonestringPhone (at least six digits). Kept for the restaurant, never returned.
max 40 chars
guest_emailstring (email)E-mail for the confirmation. Kept for the restaurant, never returned.
max 200 chars
guest_localestringLanguage of the guest's e-mails. Default: the restaurant's language.
Werte:
"de""en""fr""es""it"notestringThe guest's wish; part of the confirmation.
max 500 chars
duration_minutesintegerHow long to hold the table. Default: the restaurant's duration for this party size.
15 to 600
table_idsstring (uuid)[]Assign these tables; they must be free and seat the party. Default: none (the restaurant assigns).
max 10 items
statusstringpendingleaves the confirmation to the restaurant.Werte:
"confirmed""pending"default "confirmed"
notify_guestbooleanE-mail the guest (needs guest_email).
default true
Antwort201
The reservation.
objectstringPflichtAlways
reservation.Werte:
"reservation"idstring (uuid)PflichtThe reservation.
codestringPflichtShort code the guest sees.
statusstringPflichtpendingis a request the restaurant still has to confirm.Werte:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)PflichtStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerPflichtHow long the table is held.
party_sizeintegerPflichtNumber of guests.
table_idsstring (uuid)[]PflichtAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringPflichtBooked online by the guest, by the restaurant's staff, or through this API.
Werte:
"guest""staff""api"guest_namestringPflichtkann null seinThe guest's name.
notestringPflichtkann null seinThe guest's wish.
created_atstring (date-time)PflichtWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)PflichtLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)Pflichtkann null seinOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
Fehler
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.404not_found: no such object in this restaurant (objects of other restaurants are never found).409invalid_transition(the status of the object does not allow this),stage_not_used(the restaurant does not use this status),external_id_taken(your app already uses thisexternal_idfor another object of the same kind in this restaurant),slot_unavailable(the time or the table is taken),idempotency_in_progress(a request with this Idempotency-Key is still running) orconflict(the same data was changed elsewhere at the same moment, three times in a row; retry unchanged afterRetry-Afterseconds).413payload_too_large: the body is larger than the operation takes, counted in bytes: 64 KB, 2 MB forPUT /menu. Split the request.422idempotency_key_reused(the key was used with a different request) orlimit_exceeded(too many entries in one request, such as products inPUT /menu, or a limit of the restaurant is reached, such as 60 special days).429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl -X POST "https://api.flavoso.com/v1/reservations" \
-H "Authorization: Bearer $ACCESS_TOKEN" \
-H "Idempotency-Key: $(uuidgen)" \
-H "Content-Type: application/json" \
-d '{
"starts_at": "2026-10-09T17:30:00Z",
"party_size": 4,
"guest_name": "Alex Example",
"guest_phone": "+49 151 23456789",
"guest_email": "alex@example.com",
"note": "Window seat if possible"
}'{
"starts_at": "2026-10-09T17:30:00Z",
"party_size": 4,
"guest_name": "Alex Example",
"guest_phone": "+49 151 23456789",
"guest_email": "alex@example.com",
"note": "Window seat if possible"
}{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "confirmed",
"starts_at": "2026-10-09T17:30:00.000Z",
"duration_minutes": 90,
"party_size": 4,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}Free reservation times of a day
get/reservations/availability
- Recht:
reservations:read- Tarif:
- ab Pro
The times of one day for a party of this size, as the restaurant's staff sees them: from each opening in the configured interval up to the last seating, each available or not (a table is free for the party, past times never). Exactly these times are accepted by POST /reservations. Without a weekly schedule there are no times (special days with their own hours still have them).
Parameter
| Name | Ort | Beschreibung |
|---|---|---|
datestring (date)Pflicht | query | The local date (YYYY-MM-DD), from yesterday up to one year ahead. |
party_sizeintegerPflicht | query | Number of guests, 1 to 200.1 to 200 |
Antwort200
OK
objectstringPflichtAlways
availability.Werte:
"availability"datestring (date)PflichtThe day. A date YYYY-MM-DD in the restaurant's time zone.
party_sizeintegerPflichtThe party size asked for.
duration_minutesintegerPflichtHow long a table is held for this party size.
timezonestringPflichtThe restaurant's time zone.
slotsobject[]PflichtThe times of that day, ascending.
Felder darin (2)
starts_atstring (date-time)PflichtA bookable start time. ISO 8601 in UTC (
Z).availablebooleanPflichtA table is free for the party, and the time is not past.
Fehler
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl "https://api.flavoso.com/v1/reservations/availability?date=2026-10-09&party_size=4" \
-H "Authorization: Bearer $ACCESS_TOKEN"{
"object": "availability",
"date": "2026-10-09",
"party_size": 4,
"duration_minutes": 90,
"timezone": "Europe/Berlin",
"slots": [
{
"starts_at": "2026-10-09T15:30:00.000Z",
"available": true
},
{
"starts_at": "2026-10-09T16:00:00.000Z",
"available": true
},
{
"starts_at": "2026-10-09T16:30:00.000Z",
"available": false
}
]
}Retrieve a reservation
get/reservations/{id}
- Recht:
reservations:read- Tarif:
- ab Pro
One reservation. Deleted reservations answer 404. Pro plan and up.
Parameter
| Name | Ort | Beschreibung |
|---|---|---|
idstring (uuid)Pflicht | path | The reservation id (UUID). |
Antwort200
OK
objectstringPflichtAlways
reservation.Werte:
"reservation"idstring (uuid)PflichtThe reservation.
codestringPflichtShort code the guest sees.
statusstringPflichtpendingis a request the restaurant still has to confirm.Werte:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)PflichtStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerPflichtHow long the table is held.
party_sizeintegerPflichtNumber of guests.
table_idsstring (uuid)[]PflichtAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringPflichtBooked online by the guest, by the restaurant's staff, or through this API.
Werte:
"guest""staff""api"guest_namestringPflichtkann null seinThe guest's name.
notestringPflichtkann null seinThe guest's wish.
created_atstring (date-time)PflichtWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)PflichtLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)Pflichtkann null seinOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
Fehler
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.404not_found: no such object in this restaurant (objects of other restaurants are never found).429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl "https://api.flavoso.com/v1/reservations/RESERVATION_ID" \
-H "Authorization: Bearer $ACCESS_TOKEN"{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "confirmed",
"starts_at": "2026-10-09T17:30:00.000Z",
"duration_minutes": 90,
"party_size": 4,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}Change a reservation
patch/reservations/{id}
- Recht:
reservations:write- Tarif:
- ab Pro
Changes time, party size, duration, tables or the guest's note, with the rules of the restaurant's reservation board: cancelled and declined reservations cannot be changed, a seated, done or no-show reservation can only be corrected into the past (409 invalid_transition). Unlike a new booking there is no availability check, but a table must not end up taken twice: if the reservation's tables (kept or sent in table_ids) are held by another reservation at the new time, the answer is 409 slot_unavailable. Send table_ids: [] to release the tables.
All fields are checked first and then saved together in one step: a 4xx answer, including any 409, means nothing was changed and no e-mail was sent.
When time or party size change on a pending or confirmed reservation, the guest gets the change e-mail unless notify_guest is false. Produces reservation.updated. The status changes with POST /reservations/{id}/status.
Parameter
| Name | Ort | Beschreibung |
|---|---|---|
idstring (uuid)Pflicht | path | The reservation id (UUID). |
Rumpfapplication/json
starts_atstring (date-time)New start, ISO 8601 with time zone.
party_sizeintegerNew number of guests.
1 to 200
duration_minutesintegerNew duration.
15 to 600
table_idsstring (uuid)[]Replace the assigned tables; [] releases them.
max 10 items
notestringkann null seinThe guest's wish; null removes it.
max 500 chars
notify_guestbooleanE-mail the guest when time or party size change.
default true
Antwort200
The reservation after the change.
objectstringPflichtAlways
reservation.Werte:
"reservation"idstring (uuid)PflichtThe reservation.
codestringPflichtShort code the guest sees.
statusstringPflichtpendingis a request the restaurant still has to confirm.Werte:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)PflichtStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerPflichtHow long the table is held.
party_sizeintegerPflichtNumber of guests.
table_idsstring (uuid)[]PflichtAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringPflichtBooked online by the guest, by the restaurant's staff, or through this API.
Werte:
"guest""staff""api"guest_namestringPflichtkann null seinThe guest's name.
notestringPflichtkann null seinThe guest's wish.
created_atstring (date-time)PflichtWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)PflichtLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)Pflichtkann null seinOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
Fehler
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.404not_found: no such object in this restaurant (objects of other restaurants are never found).409invalid_transition(the status of the object does not allow this),stage_not_used(the restaurant does not use this status),external_id_taken(your app already uses thisexternal_idfor another object of the same kind in this restaurant),slot_unavailable(the time or the table is taken),idempotency_in_progress(a request with this Idempotency-Key is still running) orconflict(the same data was changed elsewhere at the same moment, three times in a row; retry unchanged afterRetry-Afterseconds).413payload_too_large: the body is larger than the operation takes, counted in bytes: 64 KB, 2 MB forPUT /menu. Split the request.422idempotency_key_reused(the key was used with a different request) orlimit_exceeded(too many entries in one request, such as products inPUT /menu, or a limit of the restaurant is reached, such as 60 special days).429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl -X PATCH "https://api.flavoso.com/v1/reservations/RESERVATION_ID" \
-H "Authorization: Bearer $ACCESS_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"starts_at": "2026-10-09T18:00:00Z",
"party_size": 5
}'{
"starts_at": "2026-10-09T18:00:00Z",
"party_size": 5
}{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "confirmed",
"starts_at": "2026-10-09T18:00:00.000Z",
"duration_minutes": 90,
"party_size": 5,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}Set a reservation's status
post/reservations/{id}/status
- Recht:
reservations:write- Tarif:
- ab Pro
The same transitions as in the dashboard, and only those: a request (pending) becomes confirmed or declined (cancelled on a request means declined); confirmed becomes seated (from an hour before the start), done or no_show (from the start) or cancelled; seated becomes done. declined and cancelled are final. Anything else answers 409 invalid_transition with the statuses that are possible now. confirmed, declined and cancelled e-mail the guest, cancelled also notifies the staff. seated, done and no_show are silent.
Parameter
| Name | Ort | Beschreibung |
|---|---|---|
idstring (uuid)Pflicht | path | The reservation id (UUID). |
Idempotency-Keystring | header | Any unique string up to 255 printable characters. Retrying a POST with the same key returns the first response (header Idempotent-Replayed: true) instead of acting twice; the same key with a different body is 422 idempotency_key_reused. Kept for 24 hours. Answers that ask for a retry (5xx, 409 conflict) are not kept. While the first request runs, a retry gets 409 idempotency_in_progress; a first request that never finished frees the key after 2 minutes.max 255 chars |
Rumpfapplication/json
statusstringPflichtThe status to move to.
Werte:
"confirmed""declined""seated""done""cancelled""no_show"
Antwort200
OK
objectstringPflichtAlways
reservation.Werte:
"reservation"idstring (uuid)PflichtThe reservation.
codestringPflichtShort code the guest sees.
statusstringPflichtpendingis a request the restaurant still has to confirm.Werte:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)PflichtStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerPflichtHow long the table is held.
party_sizeintegerPflichtNumber of guests.
table_idsstring (uuid)[]PflichtAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringPflichtBooked online by the guest, by the restaurant's staff, or through this API.
Werte:
"guest""staff""api"guest_namestringPflichtkann null seinThe guest's name.
notestringPflichtkann null seinThe guest's wish.
created_atstring (date-time)PflichtWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)PflichtLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)Pflichtkann null seinOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
Fehler
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.404not_found: no such object in this restaurant (objects of other restaurants are never found).409invalid_transition(the status of the object does not allow this),stage_not_used(the restaurant does not use this status),external_id_taken(your app already uses thisexternal_idfor another object of the same kind in this restaurant),slot_unavailable(the time or the table is taken),idempotency_in_progress(a request with this Idempotency-Key is still running) orconflict(the same data was changed elsewhere at the same moment, three times in a row; retry unchanged afterRetry-Afterseconds).413payload_too_large: the body is larger than the operation takes, counted in bytes: 64 KB, 2 MB forPUT /menu. Split the request.422idempotency_key_reused(the key was used with a different request) orlimit_exceeded(too many entries in one request, such as products inPUT /menu, or a limit of the restaurant is reached, such as 60 special days).429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl -X POST "https://api.flavoso.com/v1/reservations/RESERVATION_ID/status" \
-H "Authorization: Bearer $ACCESS_TOKEN" \
-H "Idempotency-Key: $(uuidgen)" \
-H "Content-Type: application/json" \
-d '{
"status": "seated"
}'{
"status": "seated"
}{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "seated",
"starts_at": "2026-10-09T17:30:00.000Z",
"duration_minutes": 90,
"party_size": 4,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}Etwas unklar geblieben? Schreib an support@flavoso.com und nenne die Kennung aus X-Request-Id. Damit finden wir deine Anfrage im Protokoll.