One REST API sells every airline we carry: search, book, ticket, refund and reissue, paid from your FlightOTA deposit.
Paid from your deposit•21 Endpoints
API MARKETPLACE7 APIs
Every travel API your product needs
Unified REST APIs for flights, hotels, eSIMs, visas, and transfers with the same keys and conventions.
X-Api-Key & X-Api-SecretPaid from your depositLive after certification
Travel Product Verticals
Browse APIs by Category
Unified API Mesh
Built for high-volume travel bookings
The partner APIs share the same keys and error envelope, eliminating integration overhead across fragmented suppliers.
Two headers, no token
Send X-Api-Key and X-Api-Secret on every request. No login call, no token.
Live answers, read back any time
There are no webhooks yet. The booking is always the source of truth: read it to follow what happened.
100% Idempotent Retries
Guaranteed safe network retries using client-supplied Idempotency-Key headers without double-booking.
Paid from your deposit
Tickets, orders and rides are paid from your deposit. Refunds and voids are paid back into it.
Travel Technology Protocols
Request Full API Schema →Complete Booking Engine & Mid-Office Infrastructure
Aviation & GDS Core
Amadeus, Sabre & Travelport GDS consolidation alongside direct IATA NDC Level 4 pipes. Features dynamic 3D seat maps, automated PNR queues, and zero-surcharge net ticketing.
NDC 21.3Split-TicketingTTL Alerts
Wholesale Stays & Extranet
Aggregated room rates across 1.2M+ properties via Hotelbeds, WebBeds, and Expedia EPS, plus direct hotelier extranet (CRS) for proprietary contracted room inventory.
Static CacheAllotment ExtranetRate Parity
Corporate CSBT & ERP
Enterprise self-booking tool with policy validation, multi-tier manager approvals, department cost centers, and automated reconciliation for TMCs.
L1/L2 ApprovalsAgent WalletsTax Invoicing
Developer experience
One REST API, the same keys and conventions
Flights, hotels, eSIM and transfers work the same way. Every call below is in the guides, with a real sandbox example.
Two headers, no token
Send X-Api-Key and X-Api-Secret on every request. No login call, no token.
Money is never a float
Integer minor units in your billing currency: 6863200 is 68,632.00 BDT.
Retries that never double-book
If your call times out, send the same request with the same Idempotency-Key: you get the booking that was made, never a second one.
Errors you can branch on
Every error has the same envelope. Branch on error.code; message is for people.
Unknown is null
refundable: null means the airline did not say, not "no".
A sandbox on real test systems
Sandbox bookings go to airline test systems. A refusal there is a real code your integration must handle.
curl -X POST "https://sandbox.flightota.com/api/v1/flights/search" \
-H "X-Api-Key: $FLIGHTOTA_API_KEY" \
-H "X-Api-Secret: $FLIGHTOTA_API_SECRET" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-d '{
"slices": [
{
"origin": "DAC",
"destination": "DXB",
"departure_date": "2026-10-22"
}
],
"passengers": {
"adults": 1,
"children": 1,
"infants": 1
},
"cabin": "economy",
"fares": "standard",
"filters": {
"max_offers": 20
}
}'Instant Sandbox Provisioning
Start building with free sandbox access
Create an account, generate a test key and make your first request in minutes. No credit card required.