API FlavosoRéférence de l'APIRéservations
Réservations
Lire les réservations, consulter les créneaux libres, créer, modifier et faire passer les réservations d'un statut à l'autre. À partir de l'offre Pro. Plus de détails sous Réservations.
Points de terminaison
List reservations
get/reservations
- Droit:
reservations:read- Offre:
- à partir de Pro
Same paging and polling rules as GET /orders: newest change first, or ascending with updated_since (poll with a minute of overlap and deduplicate by id + updated_at).
With starts_from and/or starts_until (tonight, this week) the list is sorted by starts_at ascending instead. Deleted reservations are never listed. Pro plan and up (plan_required otherwise).
Paramètres
| Nom | Emplacement | Description |
|---|---|---|
statusstring | query | Comma-separated: pending, confirmed, declined, seated, done, cancelled, no_show. |
updated_sincestring (date-time) | query | Only reservations changed after this instant (exclusive; ISO 8601 with time zone, write + as %2B in a URL). Poll with an overlap, as for orders. |
starts_fromstring (date-time) | query | Only reservations starting at or after this instant (ISO 8601 with time zone; write + as %2B in a URL). Sorts by starts_at. |
starts_untilstring (date-time) | query | Only reservations starting before this instant (exclusive). Sorts by starts_at. |
limitinteger | query | Page size, 1 to 100. Default 25.1 to 100 · default 25 |
cursorstring | query | next_cursor of the previous page. Opaque; send the same filters again with it. |
Réponse200
OK
objectstringobligatoireAlways
list.Valeurs:
"list"dataReservation[]obligatoireThe items of this page.
Champs contenus (14)
objectstringobligatoireAlways
reservation.Valeurs:
"reservation"idstring (uuid)obligatoireThe reservation.
codestringobligatoireShort code the guest sees.
statusstringobligatoirependingis a request the restaurant still has to confirm.Valeurs:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)obligatoireStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerobligatoireHow long the table is held.
party_sizeintegerobligatoireNumber of guests.
table_idsstring (uuid)[]obligatoireAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringobligatoireBooked online by the guest, by the restaurant's staff, or through this API.
Valeurs:
"guest""staff""api"guest_namestringobligatoirepeut être nullThe guest's name.
notestringobligatoirepeut être nullThe guest's wish.
created_atstring (date-time)obligatoireWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)obligatoireLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)obligatoirepeut être nullOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
has_morebooleanobligatoireWhether another page follows.
next_cursorstringobligatoirepeut être nullPass as
cursor(with the same filters) to get the next page; null on the last page.
Erreurs
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl "https://api.flavoso.com/v1/reservations" \
-H "Authorization: Bearer $ACCESS_TOKEN"{
"object": "list",
"data": [
{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "confirmed",
"starts_at": "2026-10-09T17:30:00.000Z",
"duration_minutes": 90,
"party_size": 4,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}
],
"has_more": false,
"next_cursor": null
}Create a reservation
post/reservations
- Droit:
reservations:write- Offre:
- à partir de Pro
Books a table for the restaurant, like the restaurant's own staff would: all tables count (also those not bookable online), there is no lead time and no booking horizon, and online reservations need not be switched on. Unlike staff, your app cannot overbook: starts_at must be one of the times GET /reservations/availability offers for that day, and a table must be free for the party (or the table_ids you send). Otherwise 409 slot_unavailable.
status is confirmed (default) or pending (the restaurant confirms). With guest_email the guest receives the confirmation (or, for pending, the request) e-mail in guest_locale (default: the restaurant's language), unless notify_guest is false. The restaurant's staff is not notified, as with a booking they make themselves. Produces reservation.created; source is api.
Paramètres
| Nom | Emplacement | Description |
|---|---|---|
Idempotency-Keystring | header | Any unique string up to 255 printable characters. Retrying a POST with the same key returns the first response (header Idempotent-Replayed: true) instead of acting twice; the same key with a different body is 422 idempotency_key_reused. Kept for 24 hours. Answers that ask for a retry (5xx, 409 conflict) are not kept. While the first request runs, a retry gets 409 idempotency_in_progress; a first request that never finished frees the key after 2 minutes.max 255 chars |
Corpsapplication/json
starts_atstring (date-time)obligatoireStart, ISO 8601 with time zone; one of the times
GET /reservations/availabilityoffers.party_sizeintegerobligatoireNumber of guests.
1 to 200
guest_namestringobligatoireThe guest's name.
max 120 chars
guest_phonestringPhone (at least six digits). Kept for the restaurant, never returned.
max 40 chars
guest_emailstring (email)E-mail for the confirmation. Kept for the restaurant, never returned.
max 200 chars
guest_localestringLanguage of the guest's e-mails. Default: the restaurant's language.
Valeurs:
"de""en""fr""es""it"notestringThe guest's wish; part of the confirmation.
max 500 chars
duration_minutesintegerHow long to hold the table. Default: the restaurant's duration for this party size.
15 to 600
table_idsstring (uuid)[]Assign these tables; they must be free and seat the party. Default: none (the restaurant assigns).
max 10 items
statusstringpendingleaves the confirmation to the restaurant.Valeurs:
"confirmed""pending"default "confirmed"
notify_guestbooleanE-mail the guest (needs guest_email).
default true
Réponse201
The reservation.
objectstringobligatoireAlways
reservation.Valeurs:
"reservation"idstring (uuid)obligatoireThe reservation.
codestringobligatoireShort code the guest sees.
statusstringobligatoirependingis a request the restaurant still has to confirm.Valeurs:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)obligatoireStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerobligatoireHow long the table is held.
party_sizeintegerobligatoireNumber of guests.
table_idsstring (uuid)[]obligatoireAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringobligatoireBooked online by the guest, by the restaurant's staff, or through this API.
Valeurs:
"guest""staff""api"guest_namestringobligatoirepeut être nullThe guest's name.
notestringobligatoirepeut être nullThe guest's wish.
created_atstring (date-time)obligatoireWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)obligatoireLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)obligatoirepeut être nullOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
Erreurs
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.404not_found: no such object in this restaurant (objects of other restaurants are never found).409invalid_transition(the status of the object does not allow this),stage_not_used(the restaurant does not use this status),external_id_taken(your app already uses thisexternal_idfor another object of the same kind in this restaurant),slot_unavailable(the time or the table is taken),idempotency_in_progress(a request with this Idempotency-Key is still running) orconflict(the same data was changed elsewhere at the same moment, three times in a row; retry unchanged afterRetry-Afterseconds).413payload_too_large: the body is larger than the operation takes, counted in bytes: 64 KB, 2 MB forPUT /menu. Split the request.422idempotency_key_reused(the key was used with a different request) orlimit_exceeded(too many entries in one request, such as products inPUT /menu, or a limit of the restaurant is reached, such as 60 special days).429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl -X POST "https://api.flavoso.com/v1/reservations" \
-H "Authorization: Bearer $ACCESS_TOKEN" \
-H "Idempotency-Key: $(uuidgen)" \
-H "Content-Type: application/json" \
-d '{
"starts_at": "2026-10-09T17:30:00Z",
"party_size": 4,
"guest_name": "Alex Example",
"guest_phone": "+49 151 23456789",
"guest_email": "alex@example.com",
"note": "Window seat if possible"
}'{
"starts_at": "2026-10-09T17:30:00Z",
"party_size": 4,
"guest_name": "Alex Example",
"guest_phone": "+49 151 23456789",
"guest_email": "alex@example.com",
"note": "Window seat if possible"
}{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "confirmed",
"starts_at": "2026-10-09T17:30:00.000Z",
"duration_minutes": 90,
"party_size": 4,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}Free reservation times of a day
get/reservations/availability
- Droit:
reservations:read- Offre:
- à partir de Pro
The times of one day for a party of this size, as the restaurant's staff sees them: from each opening in the configured interval up to the last seating, each available or not (a table is free for the party, past times never). Exactly these times are accepted by POST /reservations. Without a weekly schedule there are no times (special days with their own hours still have them).
Paramètres
| Nom | Emplacement | Description |
|---|---|---|
datestring (date)obligatoire | query | The local date (YYYY-MM-DD), from yesterday up to one year ahead. |
party_sizeintegerobligatoire | query | Number of guests, 1 to 200.1 to 200 |
Réponse200
OK
objectstringobligatoireAlways
availability.Valeurs:
"availability"datestring (date)obligatoireThe day. A date YYYY-MM-DD in the restaurant's time zone.
party_sizeintegerobligatoireThe party size asked for.
duration_minutesintegerobligatoireHow long a table is held for this party size.
timezonestringobligatoireThe restaurant's time zone.
slotsobject[]obligatoireThe times of that day, ascending.
Champs contenus (2)
starts_atstring (date-time)obligatoireA bookable start time. ISO 8601 in UTC (
Z).availablebooleanobligatoireA table is free for the party, and the time is not past.
Erreurs
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl "https://api.flavoso.com/v1/reservations/availability?date=2026-10-09&party_size=4" \
-H "Authorization: Bearer $ACCESS_TOKEN"{
"object": "availability",
"date": "2026-10-09",
"party_size": 4,
"duration_minutes": 90,
"timezone": "Europe/Berlin",
"slots": [
{
"starts_at": "2026-10-09T15:30:00.000Z",
"available": true
},
{
"starts_at": "2026-10-09T16:00:00.000Z",
"available": true
},
{
"starts_at": "2026-10-09T16:30:00.000Z",
"available": false
}
]
}Retrieve a reservation
get/reservations/{id}
- Droit:
reservations:read- Offre:
- à partir de Pro
One reservation. Deleted reservations answer 404. Pro plan and up.
Paramètres
| Nom | Emplacement | Description |
|---|---|---|
idstring (uuid)obligatoire | path | The reservation id (UUID). |
Réponse200
OK
objectstringobligatoireAlways
reservation.Valeurs:
"reservation"idstring (uuid)obligatoireThe reservation.
codestringobligatoireShort code the guest sees.
statusstringobligatoirependingis a request the restaurant still has to confirm.Valeurs:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)obligatoireStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerobligatoireHow long the table is held.
party_sizeintegerobligatoireNumber of guests.
table_idsstring (uuid)[]obligatoireAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringobligatoireBooked online by the guest, by the restaurant's staff, or through this API.
Valeurs:
"guest""staff""api"guest_namestringobligatoirepeut être nullThe guest's name.
notestringobligatoirepeut être nullThe guest's wish.
created_atstring (date-time)obligatoireWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)obligatoireLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)obligatoirepeut être nullOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
Erreurs
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.404not_found: no such object in this restaurant (objects of other restaurants are never found).429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl "https://api.flavoso.com/v1/reservations/RESERVATION_ID" \
-H "Authorization: Bearer $ACCESS_TOKEN"{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "confirmed",
"starts_at": "2026-10-09T17:30:00.000Z",
"duration_minutes": 90,
"party_size": 4,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}Change a reservation
patch/reservations/{id}
- Droit:
reservations:write- Offre:
- à partir de Pro
Changes time, party size, duration, tables or the guest's note, with the rules of the restaurant's reservation board: cancelled and declined reservations cannot be changed, a seated, done or no-show reservation can only be corrected into the past (409 invalid_transition). Unlike a new booking there is no availability check, but a table must not end up taken twice: if the reservation's tables (kept or sent in table_ids) are held by another reservation at the new time, the answer is 409 slot_unavailable. Send table_ids: [] to release the tables.
All fields are checked first and then saved together in one step: a 4xx answer, including any 409, means nothing was changed and no e-mail was sent.
When time or party size change on a pending or confirmed reservation, the guest gets the change e-mail unless notify_guest is false. Produces reservation.updated. The status changes with POST /reservations/{id}/status.
Paramètres
| Nom | Emplacement | Description |
|---|---|---|
idstring (uuid)obligatoire | path | The reservation id (UUID). |
Corpsapplication/json
starts_atstring (date-time)New start, ISO 8601 with time zone.
party_sizeintegerNew number of guests.
1 to 200
duration_minutesintegerNew duration.
15 to 600
table_idsstring (uuid)[]Replace the assigned tables; [] releases them.
max 10 items
notestringpeut être nullThe guest's wish; null removes it.
max 500 chars
notify_guestbooleanE-mail the guest when time or party size change.
default true
Réponse200
The reservation after the change.
objectstringobligatoireAlways
reservation.Valeurs:
"reservation"idstring (uuid)obligatoireThe reservation.
codestringobligatoireShort code the guest sees.
statusstringobligatoirependingis a request the restaurant still has to confirm.Valeurs:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)obligatoireStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerobligatoireHow long the table is held.
party_sizeintegerobligatoireNumber of guests.
table_idsstring (uuid)[]obligatoireAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringobligatoireBooked online by the guest, by the restaurant's staff, or through this API.
Valeurs:
"guest""staff""api"guest_namestringobligatoirepeut être nullThe guest's name.
notestringobligatoirepeut être nullThe guest's wish.
created_atstring (date-time)obligatoireWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)obligatoireLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)obligatoirepeut être nullOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
Erreurs
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.404not_found: no such object in this restaurant (objects of other restaurants are never found).409invalid_transition(the status of the object does not allow this),stage_not_used(the restaurant does not use this status),external_id_taken(your app already uses thisexternal_idfor another object of the same kind in this restaurant),slot_unavailable(the time or the table is taken),idempotency_in_progress(a request with this Idempotency-Key is still running) orconflict(the same data was changed elsewhere at the same moment, three times in a row; retry unchanged afterRetry-Afterseconds).413payload_too_large: the body is larger than the operation takes, counted in bytes: 64 KB, 2 MB forPUT /menu. Split the request.422idempotency_key_reused(the key was used with a different request) orlimit_exceeded(too many entries in one request, such as products inPUT /menu, or a limit of the restaurant is reached, such as 60 special days).429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl -X PATCH "https://api.flavoso.com/v1/reservations/RESERVATION_ID" \
-H "Authorization: Bearer $ACCESS_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"starts_at": "2026-10-09T18:00:00Z",
"party_size": 5
}'{
"starts_at": "2026-10-09T18:00:00Z",
"party_size": 5
}{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "confirmed",
"starts_at": "2026-10-09T18:00:00.000Z",
"duration_minutes": 90,
"party_size": 5,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}Set a reservation's status
post/reservations/{id}/status
- Droit:
reservations:write- Offre:
- à partir de Pro
The same transitions as in the dashboard, and only those: a request (pending) becomes confirmed or declined (cancelled on a request means declined); confirmed becomes seated (from an hour before the start), done or no_show (from the start) or cancelled; seated becomes done. declined and cancelled are final. Anything else answers 409 invalid_transition with the statuses that are possible now. confirmed, declined and cancelled e-mail the guest, cancelled also notifies the staff. seated, done and no_show are silent.
Paramètres
| Nom | Emplacement | Description |
|---|---|---|
idstring (uuid)obligatoire | path | The reservation id (UUID). |
Idempotency-Keystring | header | Any unique string up to 255 printable characters. Retrying a POST with the same key returns the first response (header Idempotent-Replayed: true) instead of acting twice; the same key with a different body is 422 idempotency_key_reused. Kept for 24 hours. Answers that ask for a retry (5xx, 409 conflict) are not kept. While the first request runs, a retry gets 409 idempotency_in_progress; a first request that never finished frees the key after 2 minutes.max 255 chars |
Corpsapplication/json
statusstringobligatoireThe status to move to.
Valeurs:
"confirmed""declined""seated""done""cancelled""no_show"
Réponse200
OK
objectstringobligatoireAlways
reservation.Valeurs:
"reservation"idstring (uuid)obligatoireThe reservation.
codestringobligatoireShort code the guest sees.
statusstringobligatoirependingis a request the restaurant still has to confirm.Valeurs:
"pending""confirmed""declined""seated""done""cancelled""no_show"starts_atstring (date-time)obligatoireStart of the reservation. ISO 8601 in UTC (
Z).duration_minutesintegerobligatoireHow long the table is held.
party_sizeintegerobligatoireNumber of guests.
table_idsstring (uuid)[]obligatoireAssigned tables (
GET /tables); empty when none is assigned yet.sourcestringobligatoireBooked online by the guest, by the restaurant's staff, or through this API.
Valeurs:
"guest""staff""api"guest_namestringobligatoirepeut être nullThe guest's name.
notestringobligatoirepeut être nullThe guest's wish.
created_atstring (date-time)obligatoireWhen it was made. ISO 8601 in UTC (
Z).updated_atstring (date-time)obligatoireLast change. ISO 8601 in UTC (
Z).deleted_atstring (date-time)obligatoirepeut être nullOnly set in the event that reports a deletion; deleted reservations are not returned otherwise.
Erreurs
400invalid_request: a parameter or the body is wrong, or it contains a query parameter or field the operation does not know.paramnames the field.401unauthorized: missing, malformed, expired or revoked access token, or the app was disconnected or suspended.403insufficient_scope,plan_required(withparamwhen an order type is not in the plan) oraccount_inactive.404not_found: no such object in this restaurant (objects of other restaurants are never found).409invalid_transition(the status of the object does not allow this),stage_not_used(the restaurant does not use this status),external_id_taken(your app already uses thisexternal_idfor another object of the same kind in this restaurant),slot_unavailable(the time or the table is taken),idempotency_in_progress(a request with this Idempotency-Key is still running) orconflict(the same data was changed elsewhere at the same moment, three times in a row; retry unchanged afterRetry-Afterseconds).413payload_too_large: the body is larger than the operation takes, counted in bytes: 64 KB, 2 MB forPUT /menu. Split the request.422idempotency_key_reused(the key was used with a different request) orlimit_exceeded(too many entries in one request, such as products inPUT /menu, or a limit of the restaurant is reached, such as 60 special days).429rate_limited: more than 120 requests per minute on this connection. WaitRetry-Afterseconds.500server_error. Safe to retry with the same Idempotency-Key.
curl -X POST "https://api.flavoso.com/v1/reservations/RESERVATION_ID/status" \
-H "Authorization: Bearer $ACCESS_TOKEN" \
-H "Idempotency-Key: $(uuidgen)" \
-H "Content-Type: application/json" \
-d '{
"status": "seated"
}'{
"status": "seated"
}{
"object": "reservation",
"id": "0b9e4f2c-7a1d-4c3e-8f56-1d2e3f4a5b6c",
"code": "R4K8P2",
"status": "seated",
"starts_at": "2026-10-09T17:30:00.000Z",
"duration_minutes": 90,
"party_size": 4,
"table_ids": [
"3c7a9e1f-5b2d-4f8a-9c6e-7d1b3a5f9e24"
],
"source": "api",
"guest_name": "Alex Example",
"note": "Window seat if possible",
"created_at": "2026-10-04T10:12:33.481Z",
"updated_at": "2026-10-04T10:12:33.481Z",
"deleted_at": null
}Une question reste ouverte ? Écrivez à support@flavoso.com en indiquant l'identifiant de X-Request-Id. Il nous permet de retrouver votre requête dans le journal.