For travel agencies and partner websites

Partner API v1

Show our activities, yachts, events and travel extras on your own website or booking system, at your agent prices, and book them straight from your agency wallet. Ask your account manager for a sandbox key.

Basics

Base URL: https://umairtravels.com/api/v1 — HTTPS, JSON in and out.
Auth: Authorization: Bearer bsk_… on every request (or X-Api-Key).
Sandbox keys (bsk_test_…) run every check and return a priced quote, but create no booking and charge nothing. Live keys (bsk_live_…) book for real.
Prices are in AED and already include your agent discount. Bookings are paid from your wallet / credit.
Errors: {"error": {"code", "message"}}; validation errors are 422 with errors.field messages. Limits per key (default 60 requests / minute) → 429 with Retry-After.

Endpoints

Method	Path	What it does
GET	/account	Your wallet balance, credit and discount
GET	/products?type=tour\|yacht\|event\|extra&city=dubai	Product list with your "from" price (paginated: page, per_page ≤ 100)
GET	/products/{product}	Options, time slots, transfers, extras, guest rules, cancellation policy
GET	/products/{product}/availability?date=YYYY-MM-DD&option={id}	Live availability, seats left and prices for a date
POST	/bookings	Book one or more items (paid from your wallet)
GET	/bookings/{booking_no}	Status, items, refund, voucher link
POST	/bookings/{booking_no}/cancel	Ask to cancel (our team reviews it under the policy; refunds go back to your wallet)

Book

curl -X POST https://umairtravels.com/api/v1/bookings \ -H "Authorization: Bearer bsk_test_xxxxxxxx_…" -H "Content-Type: application/json" \ -d '{ "reference": "PARTNER-10025", "lead": {"name": "Sara Ahmed", "email": "sara@example.com", "phone": "+971501234567"}, "notify_guest": false, "items": [{ "product": "evening-desert-safari-with-bbq-dinner", "date": "2026-11-20", "option_id": 1, "slot_id": 1, "transfer": "sharing", "adults": 2, "children": 1, "addons": {"3": {"q": 2}} }, { "product": "55-ft-luxury-yacht-private-charter", "date": "2026-11-21", "slot_id": 7, "transfer": "none", "adults": 6, "units": 3 }] }'

reference is your own order number — send the same one again and you get the same booking back (no double booking).
units = hours for private charters, quantity for per-item products (SIM, eSIM…).
The response (201) has booking_no, status, total, every item and a voucher_url (signed PDF link, valid 180 days) you can give your customer.
Not enough wallet balance or credit → 422 and nothing is booked.

Webhooks

Give us an https URL for your live key and we POST booking.updated whenever one of your bookings changes (confirmed, cancelled, refunded):

{"event": "booking.updated", "sent_at": "2026-11-20T10:15:00+00:00", "data": {"booking_no": "BS261120ABCDE", "reference": "PARTNER-10025", "status": "cancelled", "payment_status": "refunded", "total": 1450.0, "refund": 1450.0, "currency": "AED"}}

Check it came from us: X-BS-Signature = HMAC-SHA256 of the raw body with your webhook secret. Reply 2xx within 5 seconds.

Good to know

Always check availability right before booking — seats and prices are checked again when you book.
Keep your key on your server only. If it leaks, ask us to revoke it and issue a new one. We can also lock a key to your server's IP addresses.
The version is in the URL (/v1); changes that could break your integration will come as /v2.