Every request carries a tenant-scoped key in the X-API-Key header. Keys are created in Settings → API keys. All timestamps are Asia/Riyadh. Base URL: https://fleet.intilaq.host/api/v1
| Method | Path | Description |
|---|---|---|
| GET | /quote | Price a trip: from, to, vehicle_type, trip_type, date, promo_code. Same rules engine as the UI and the AI agent. |
| GET | /locations | Pickup / drop-off points the operator prices. |
| GET | /bookings | List bookings. Filters: status, date, customer_phone, upcoming=1, limit. |
| POST | /bookings | Create a booking (auto-priced, duplicate-checked, WhatsApp confirmation sent, optional auto_dispatch). |
| GET | /bookings/{code} | Booking details incl. driver & voucher URL. |
| PATCH | /bookings/{code} | Reschedule / edit: pickup_at, passengers, flight_no, pickup_note, notes. |
| DELETE | /bookings/{code} | Cancel (customer notified). |
| GET | /vehicles · /drivers | Fleet and driver roster with live status. |
201 returns the booking (code, total, driver if dispatched, voucher_url) and the full quote breakdown. Errors: 422 validation (with the field list), 409 duplicate (send force:true), 401 bad key.Register an HTTPS endpoint per tenant; events are signed with HMAC-SHA256 (X-Signature) and retried with backoff.
booking.created · booking.updated · booking.assigned · booking.en_route · booking.completed · booking.cancelled · payment.received · conversation.handoff