API Platform
Programmatic access to the ShuttleHawaii marketplace — for partners, hotels, and enterprise integrations. (Design preview; endpoints roll out with the enterprise phase.)
Authentication
API access uses per-organization API keys (table sh_api_keys), scoped and rate-limited. Keys are passed as a bearer token:
Authorization: Bearer sh_live_xxx
Core endpoints
| Method | Path | Purpose |
|---|---|---|
| GET | /api/v1/quotes | Live transportation quotes for a route |
| POST | /api/v1/bookings | Create a booking |
| GET | /api/v1/bookings/:ref | Retrieve booking status |
| GET | /api/v1/availability | Provider vehicle availability |
| GET | /api/v1/flights | Flight search / arrival tracking |
| GET | /api/v1/experiences | Tours & activities inventory |
| GET | /api/v1/analytics | Bookings, GMV, and performance metrics |
Concierge API (live)
The AI concierge is already exposed at POST /api/concierge. It accepts a message array and returns a completion, calling live pricing tools internally. This same endpoint powers the web and (in Phase 2) the mobile apps.
Webhooks
Enterprise integrations subscribe to marketplace events:
booking.createdbooking.completedpayment.receiveddriver.assignedtrip.cancelled
Rate limits
Default 1,000 requests/key/hour (configurable per plan via sh_api_keys.rate_limit). Usage is tracked for metered billing.