API de FlavosoReferencia de la APIReservas
Reservas
Leer reservas, consultar horas libres, crear, cambiar y pasar las reservas de un estado a otro. A partir del plan Pro. Más en Reservas.
Endpoints
List reservations
get/reservations
- Permiso:
reservations:read- Plan:
- a partir de Pro
Same paging and polling rules as GET /orders: newest change first, or ascending with updated_since (poll with a minute of overlap and deduplicate by id + updated_at).
With starts_from and/or starts_until (tonight, this week) the list is sorted by starts_at ascending instead. Deleted reservations are never listed. Pro plan and up (plan_required otherwise).
Parámetros
| Nombre | Ubicación | Descripción |
|---|---|---|
statusstring | query | Comma-separated: pending, confirmed, declined, seated, done, cancelled, no_show. |
updated_sincestring (date-time) | query | Only reservations changed after this instant (exclusive; ISO 8601 with time zone, write + as %2B in a URL). Poll with an overlap, as for orders. |
starts_fromstring (date-time) | query | Only reservations starting at or after this instant (ISO 8601 with time zone; write + as %2B in a URL). Sorts by starts_at. |
starts_untilstring (date-time) | query | Only reservations starting before this instant (exclusive). Sorts by starts_at. |
limitinteger | query | Page size, 1 to 100. Default 25.1 to 100 · default 25 |
cursorstring | query | next_cursor of the previous page. Opaque; send the same filters again with it. |
Respuesta200
OK
objectstringobligatorioAlways
list.Valores:
"list"dataReservation[]obligatorioThe items of this page.
Campos anidados (14)
objectstringobligatorioAlways
reservation.Valores:
"reservation"idstring (uuid)obligatorioThe reservation.
codestringobligatorioShort code the guest sees.
statusstringobligatoriopendingis a request the restaurant still has to confirm.Valores:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)obligatorioStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerobligatorioHow long the table is held.
party_sizeintegerobligatorioNumber of guests.
table_idsstring (uuid)[]obligatorioAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringobligatorioBooked online by the guest, by the restaurant's staff, or through this API.
Valores:
"guest""staff""api"guest_namestringobligatoriopuede ser nullThe guest's name.
notestringobligatoriopuede ser nullThe guest's wish.
created_atstring (date-time)obligatorioWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)obligatorioLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)obligatoriopuede ser nullOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
has_morebooleanobligatorioWhether another page follows.
next_cursorstringobligatoriopuede ser nullPass as
cursor(with the same filters) to get the next page; null on the last page.
Errores
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl "https://api.flavoso.com/v1/reservations" \
-H "Authorization: Bearer $ACCESS_TOKEN"{
"object": "list",
"data": [
{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "confirmed",
"starts_at": "2026-10-09T17:30:00.000Z",
"duration_minutes": 90,
"party_size": 4,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}
],
"has_more": false,
"next_cursor": null
}Create a reservation
post/reservations
- Permiso:
reservations:write- Plan:
- a partir de Pro
Books a table for the restaurant, like the restaurant's own staff would: all tables count (also those not bookable online), there is no lead time and no booking horizon, and online reservations need not be switched on. Unlike staff, your app cannot overbook: starts_at must be one of the times GET /reservations/availability offers for that day, and a table must be free for the party (or the table_ids you send). Otherwise 409 slot_unavailable.
status is confirmed (default) or pending (the restaurant confirms). With guest_email the guest receives the confirmation (or, for pending, the request) e-mail in guest_locale (default: the restaurant's language), unless notify_guest is false. The restaurant's staff is not notified, as with a booking they make themselves. Produces reservation.created; source is api.
Parámetros
| Nombre | Ubicación | Descripción |
|---|---|---|
Idempotency-Keystring | header | Any unique string up to 255 printable characters. Retrying a POST with the same key returns the first response (header Idempotent-Replayed: true) instead of acting twice; the same key with a different body is 422 idempotency_key_reused. Kept for 24 hours. Answers that ask for a retry (5xx, 409 conflict) are not kept. While the first request runs, a retry gets 409 idempotency_in_progress; a first request that never finished frees the key after 2 minutes.max 255 chars |
Cuerpoapplication/json
starts_atstring (date-time)obligatorioStart, ISO 8601 with time zone; one of the times
GET /reservations/availabilityoffers.party_sizeintegerobligatorioNumber of guests.
1 to 200
guest_namestringobligatorioThe guest's name.
max 120 chars
guest_phonestringPhone (at least six digits). Kept for the restaurant, never returned.
max 40 chars
guest_emailstring (email)E-mail for the confirmation. Kept for the restaurant, never returned.
max 200 chars
guest_localestringLanguage of the guest's e-mails. Default: the restaurant's language.
Valores:
"de""en""fr""es""it"notestringThe guest's wish; part of the confirmation.
max 500 chars
duration_minutesintegerHow long to hold the table. Default: the restaurant's duration for this party size.
15 to 600
table_idsstring (uuid)[]Assign these tables; they must be free and seat the party. Default: none (the restaurant assigns).
max 10 items
statusstringpendingleaves the confirmation to the restaurant.Valores:
"confirmed""pending"default "confirmed"
notify_guestbooleanE-mail the guest (needs guest_email).
default true
Respuesta201
The reservation.
objectstringobligatorioAlways
reservation.Valores:
"reservation"idstring (uuid)obligatorioThe reservation.
codestringobligatorioShort code the guest sees.
statusstringobligatoriopendingis a request the restaurant still has to confirm.Valores:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)obligatorioStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerobligatorioHow long the table is held.
party_sizeintegerobligatorioNumber of guests.
table_idsstring (uuid)[]obligatorioAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringobligatorioBooked online by the guest, by the restaurant's staff, or through this API.
Valores:
"guest""staff""api"guest_namestringobligatoriopuede ser nullThe guest's name.
notestringobligatoriopuede ser nullThe guest's wish.
created_atstring (date-time)obligatorioWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)obligatorioLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)obligatoriopuede ser nullOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
Errores
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.404not_found: no such object in this restaurant (objects of other restaurants are never found).409invalid_transition(the status of the object does not allow this),stage_not_used(the restaurant does not use this status),external_id_taken(your app already uses thisexternal_idfor another object of the same kind in this restaurant),slot_unavailable(the time or the table is taken),idempotency_in_progress(a request with this Idempotency-Key is still running) orconflict(the same data was changed elsewhere at the same moment, three times in a row; retry unchanged afterRetry-Afterseconds).413payload_too_large: the body is larger than the operation takes, counted in bytes: 64 KB, 2 MB forPUT /menu. Split the request.422idempotency_key_reused(the key was used with a different request) orlimit_exceeded(too many entries in one request, such as products inPUT /menu, or a limit of the restaurant is reached, such as 60 special days).429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl -X POST "https://api.flavoso.com/v1/reservations" \
-H "Authorization: Bearer $ACCESS_TOKEN" \
-H "Idempotency-Key: $(uuidgen)" \
-H "Content-Type: application/json" \
-d '{
"starts_at": "2026-10-09T17:30:00Z",
"party_size": 4,
"guest_name": "Alex Example",
"guest_phone": "+49 151 23456789",
"guest_email": "alex@example.com",
"note": "Window seat if possible"
}'{
"starts_at": "2026-10-09T17:30:00Z",
"party_size": 4,
"guest_name": "Alex Example",
"guest_phone": "+49 151 23456789",
"guest_email": "alex@example.com",
"note": "Window seat if possible"
}{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "confirmed",
"starts_at": "2026-10-09T17:30:00.000Z",
"duration_minutes": 90,
"party_size": 4,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}Free reservation times of a day
get/reservations/availability
- Permiso:
reservations:read- Plan:
- a partir de Pro
The times of one day for a party of this size, as the restaurant's staff sees them: from each opening in the configured interval up to the last seating, each available or not (a table is free for the party, past times never). Exactly these times are accepted by POST /reservations. Without a weekly schedule there are no times (special days with their own hours still have them).
Parámetros
| Nombre | Ubicación | Descripción |
|---|---|---|
datestring (date)obligatorio | query | The local date (YYYY-MM-DD), from yesterday up to one year ahead. |
party_sizeintegerobligatorio | query | Number of guests, 1 to 200.1 to 200 |
Respuesta200
OK
objectstringobligatorioAlways
availability.Valores:
"availability"datestring (date)obligatorioThe day. A date YYYY-MM-DD in the restaurant's time zone.
party_sizeintegerobligatorioThe party size asked for.
duration_minutesintegerobligatorioHow long a table is held for this party size.
timezonestringobligatorioThe restaurant's time zone.
slotsobject[]obligatorioThe times of that day, ascending.
Campos anidados (2)
starts_atstring (date-time)obligatorioA bookable start time. ISO 8601 in UTC (
Z).availablebooleanobligatorioA table is free for the party, and the time is not past.
Errores
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl "https://api.flavoso.com/v1/reservations/availability?date=2026-10-09&party_size=4" \
-H "Authorization: Bearer $ACCESS_TOKEN"{
"object": "availability",
"date": "2026-10-09",
"party_size": 4,
"duration_minutes": 90,
"timezone": "Europe/Berlin",
"slots": [
{
"starts_at": "2026-10-09T15:30:00.000Z",
"available": true
},
{
"starts_at": "2026-10-09T16:00:00.000Z",
"available": true
},
{
"starts_at": "2026-10-09T16:30:00.000Z",
"available": false
}
]
}Retrieve a reservation
get/reservations/{id}
- Permiso:
reservations:read- Plan:
- a partir de Pro
One reservation. Deleted reservations answer 404. Pro plan and up.
Parámetros
| Nombre | Ubicación | Descripción |
|---|---|---|
idstring (uuid)obligatorio | path | The reservation id (UUID). |
Respuesta200
OK
objectstringobligatorioAlways
reservation.Valores:
"reservation"idstring (uuid)obligatorioThe reservation.
codestringobligatorioShort code the guest sees.
statusstringobligatoriopendingis a request the restaurant still has to confirm.Valores:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)obligatorioStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerobligatorioHow long the table is held.
party_sizeintegerobligatorioNumber of guests.
table_idsstring (uuid)[]obligatorioAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringobligatorioBooked online by the guest, by the restaurant's staff, or through this API.
Valores:
"guest""staff""api"guest_namestringobligatoriopuede ser nullThe guest's name.
notestringobligatoriopuede ser nullThe guest's wish.
created_atstring (date-time)obligatorioWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)obligatorioLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)obligatoriopuede ser nullOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
Errores
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.404not_found: no such object in this restaurant (objects of other restaurants are never found).429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl "https://api.flavoso.com/v1/reservations/RESERVATION_ID" \
-H "Authorization: Bearer $ACCESS_TOKEN"{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "confirmed",
"starts_at": "2026-10-09T17:30:00.000Z",
"duration_minutes": 90,
"party_size": 4,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}Change a reservation
patch/reservations/{id}
- Permiso:
reservations:write- Plan:
- a partir de Pro
Changes time, party size, duration, tables or the guest's note, with the rules of the restaurant's reservation board: cancelled and declined reservations cannot be changed, a seated, done or no-show reservation can only be corrected into the past (409 invalid_transition). Unlike a new booking there is no availability check, but a table must not end up taken twice: if the reservation's tables (kept or sent in table_ids) are held by another reservation at the new time, the answer is 409 slot_unavailable. Send table_ids: [] to release the tables.
All fields are checked first and then saved together in one step: a 4xx answer, including any 409, means nothing was changed and no e-mail was sent.
When time or party size change on a pending or confirmed reservation, the guest gets the change e-mail unless notify_guest is false. Produces reservation.updated. The status changes with POST /reservations/{id}/status.
Parámetros
| Nombre | Ubicación | Descripción |
|---|---|---|
idstring (uuid)obligatorio | path | The reservation id (UUID). |
Cuerpoapplication/json
starts_atstring (date-time)New start, ISO 8601 with time zone.
party_sizeintegerNew number of guests.
1 to 200
duration_minutesintegerNew duration.
15 to 600
table_idsstring (uuid)[]Replace the assigned tables; [] releases them.
max 10 items
notestringpuede ser nullThe guest's wish; null removes it.
max 500 chars
notify_guestbooleanE-mail the guest when time or party size change.
default true
Respuesta200
The reservation after the change.
objectstringobligatorioAlways
reservation.Valores:
"reservation"idstring (uuid)obligatorioThe reservation.
codestringobligatorioShort code the guest sees.
statusstringobligatoriopendingis a request the restaurant still has to confirm.Valores:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)obligatorioStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerobligatorioHow long the table is held.
party_sizeintegerobligatorioNumber of guests.
table_idsstring (uuid)[]obligatorioAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringobligatorioBooked online by the guest, by the restaurant's staff, or through this API.
Valores:
"guest""staff""api"guest_namestringobligatoriopuede ser nullThe guest's name.
notestringobligatoriopuede ser nullThe guest's wish.
created_atstring (date-time)obligatorioWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)obligatorioLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)obligatoriopuede ser nullOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
Errores
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.404not_found: no such object in this restaurant (objects of other restaurants are never found).409invalid_transition(the status of the object does not allow this),stage_not_used(the restaurant does not use this status),external_id_taken(your app already uses thisexternal_idfor another object of the same kind in this restaurant),slot_unavailable(the time or the table is taken),idempotency_in_progress(a request with this Idempotency-Key is still running) orconflict(the same data was changed elsewhere at the same moment, three times in a row; retry unchanged afterRetry-Afterseconds).413payload_too_large: the body is larger than the operation takes, counted in bytes: 64 KB, 2 MB forPUT /menu. Split the request.422idempotency_key_reused(the key was used with a different request) orlimit_exceeded(too many entries in one request, such as products inPUT /menu, or a limit of the restaurant is reached, such as 60 special days).429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl -X PATCH "https://api.flavoso.com/v1/reservations/RESERVATION_ID" \
-H "Authorization: Bearer $ACCESS_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"starts_at": "2026-10-09T18:00:00Z",
"party_size": 5
}'{
"starts_at": "2026-10-09T18:00:00Z",
"party_size": 5
}{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "confirmed",
"starts_at": "2026-10-09T18:00:00.000Z",
"duration_minutes": 90,
"party_size": 5,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}Set a reservation's status
post/reservations/{id}/status
- Permiso:
reservations:write- Plan:
- a partir de Pro
The same transitions as in the dashboard, and only those: a request (pending) becomes confirmed or declined (cancelled on a request means declined); confirmed becomes seated (from an hour before the start), done or no_show (from the start) or cancelled; seated becomes done. declined and cancelled are final. Anything else answers 409 invalid_transition with the statuses that are possible now. confirmed, declined and cancelled e-mail the guest, cancelled also notifies the staff. seated, done and no_show are silent.
Parámetros
| Nombre | Ubicación | Descripción |
|---|---|---|
idstring (uuid)obligatorio | path | The reservation id (UUID). |
Idempotency-Keystring | header | Any unique string up to 255 printable characters. Retrying a POST with the same key returns the first response (header Idempotent-Replayed: true) instead of acting twice; the same key with a different body is 422 idempotency_key_reused. Kept for 24 hours. Answers that ask for a retry (5xx, 409 conflict) are not kept. While the first request runs, a retry gets 409 idempotency_in_progress; a first request that never finished frees the key after 2 minutes.max 255 chars |
Cuerpoapplication/json
statusstringobligatorioThe status to move to.
Valores:
"confirmed""declined""seated""done""cancelled""no_show"
Respuesta200
OK
objectstringobligatorioAlways
reservation.Valores:
"reservation"idstring (uuid)obligatorioThe reservation.
codestringobligatorioShort code the guest sees.
statusstringobligatoriopendingis a request the restaurant still has to confirm.Valores:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)obligatorioStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerobligatorioHow long the table is held.
party_sizeintegerobligatorioNumber of guests.
table_idsstring (uuid)[]obligatorioAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringobligatorioBooked online by the guest, by the restaurant's staff, or through this API.
Valores:
"guest""staff""api"guest_namestringobligatoriopuede ser nullThe guest's name.
notestringobligatoriopuede ser nullThe guest's wish.
created_atstring (date-time)obligatorioWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)obligatorioLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)obligatoriopuede ser nullOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
Errores
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.404not_found: no such object in this restaurant (objects of other restaurants are never found).409invalid_transition(the status of the object does not allow this),stage_not_used(the restaurant does not use this status),external_id_taken(your app already uses thisexternal_idfor another object of the same kind in this restaurant),slot_unavailable(the time or the table is taken),idempotency_in_progress(a request with this Idempotency-Key is still running) orconflict(the same data was changed elsewhere at the same moment, three times in a row; retry unchanged afterRetry-Afterseconds).413payload_too_large: the body is larger than the operation takes, counted in bytes: 64 KB, 2 MB forPUT /menu. Split the request.422idempotency_key_reused(the key was used with a different request) orlimit_exceeded(too many entries in one request, such as products inPUT /menu, or a limit of the restaurant is reached, such as 60 special days).429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl -X POST "https://api.flavoso.com/v1/reservations/RESERVATION_ID/status" \
-H "Authorization: Bearer $ACCESS_TOKEN" \
-H "Idempotency-Key: $(uuidgen)" \
-H "Content-Type: application/json" \
-d '{
"status": "seated"
}'{
"status": "seated"
}{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "seated",
"starts_at": "2026-10-09T17:30:00.000Z",
"duration_minutes": 90,
"party_size": 4,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}¿Algo no ha quedado claro? Escribe a support@flavoso.com e indica el identificador de X-Request-Id. Así podremos encontrar tu solicitud en el registro.