API Keys

All API requests must be authenticated using an API key. Include your key in the Authorization header:

Authorization: Bearer sk_live_your_api_key_here

Key Types

Rate Limits

API requests are rate limited to ensure fair usage:

• Standard: 100 requests per minute
• Enterprise: 1,000 requests per minute

Rate limit headers are included in all responses:

X-RateLimit-Limit: 100
X-RateLimit-Remaining: 95
X-RateLimit-Reset: 1640995200

Error Response Format

When an error occurs, the API returns a JSON response with error details:

{
  "success": false,
  "error": {
    "code": "invalid_request",
    "message": "The check_in date must be in the future",
    "field": "check_in"
  }
}

HTTP Status Codes

Error Codes

Query Parameters

Example Request

curl -X GET "https://api.hotelacorp.com/v1/bookings?status=confirmed&per_page=10" \
  -H "Authorization: Bearer sk_live_xxx"

Example Response

{
  "success": true,
  "data": [
    {
      "id": "bkg_abc123",
      "property_id": "prop_xyz",
      "room_id": "room_456",
      "guest": {
        "name": "Tanaka Taro",
        "email": "tanaka@example.com",
        "phone": "+81-90-1234-5678"
      },
      "check_in": "2026-03-01",
      "check_out": "2026-03-05",
      "nights": 4,
      "total_amount": 120000,
      "currency": "JPY",
      "status": "confirmed",
      "created_at": "2026-01-15T10:30:00Z"
    }
  ],
  "meta": {
    "page": 1,
    "per_page": 10,
    "total": 45
  }
}

Project Configuration

Services Used

Base URL

Authentication

// Required headers
apikey: YOUR_ANON_KEY
Authorization: Bearer YOUR_JWT_TOKEN

Key Tables

Example: Query Bookings

// Get confirmed bookings with guest info
const { data, error } = await supabase
  .from('bookings')
  .select(`
    id, check_in, check_out, status,
    rooms(name, property_id),
    guests(first_name, last_name, email)
  `)
  .eq('status', 'confirmed')
  .gte('check_in', '2026-01-01')
  .order('check_in', { ascending: true })
  .limit(50);

PostgREST Query Syntax

Sign In

const { data, error } = await supabase.auth.signInWithPassword({
  email: 'admin@hotelacorp.com',
  password: 'your-password'
});

// Returns session with access_token (JWT)

Get Current Session

const { data: { session } } = await supabase.auth.getSession();

if (session) {
  console.log('User ID:', session.user.id);
  console.log('Email:', session.user.email);
}

Sign Out

await supabase.auth.signOut();

Row Level Security (RLS)

All tables use RLS policies to control access. Users can only access data they're authorized to see based on their role and organization.

Buckets

Upload File

const { data, error } = await supabase.storage
  .from('inventory')
  .upload(`rooms/${roomId}/${filename}`, file, {
    cacheControl: '3600',
    upsert: false
  });

Get Public URL

const { data } = supabase.storage
  .from('inventory')
  .getPublicUrl('rooms/123/image.jpg');

console.log(data.publicUrl);
// https://rdqwmnsrtvnfskrgnyfh.supabase.co/storage/v1/object/public/inventory/rooms/123/image.jpg

Delete File

const { error } = await supabase.storage
  .from('inventory')
  .remove(['rooms/123/image.jpg']);

Base URL

Available Functions

Calling Edge Functions

const { data, error } = await supabase.functions.invoke('gmo-payment', {
  body: {
    action: 'charge',
    amount: 50000,
    cardToken: 'token_xxx',
    cardholderName: 'TARO TANAKA',
    payerEmail: 'customer@example.com'
  }
});

API Environments

Supported Payment Methods

Authentication

// Basic Auth with ShopID:ShopPass
Authorization: Basic base64(ShopID:ShopPass)

Edge Function Endpoint

Test Cards

Request Body

Example Request

const { data, error } = await supabase.functions.invoke('gmo-payment', {
  body: {
    action: 'charge',
    amount: 50000,
    cardToken: 'tok_abc123...',
    cardholderName: 'TARO TANAKA',
    payerEmail: 'tanaka@example.com',
    bookingId: 'bkg_xyz789',
    authorizationMode: 'CAPTURE',
    use3DS: true,
    returnUrl: 'https://hotelacorp.com/payment/complete'
  }
});

Success Response

{
  "success": true,
  "paymentId": "pay_abc123",
  "orderId": "HTL-20260122-XYZ789",
  "status": "captured",
  "transactionId": "TXN-98765",
  "cardBrand": "VISA",
  "cardLast4": "1111",
  "approvalCode": "123456"
}

3DS Redirect Response

{
  "success": true,
  "requires3DS": true,
  "redirectUrl": "https://acs.cardissuer.com/3ds/...",
  "paymentId": "pay_abc123",
  "orderId": "HTL-20260122-XYZ789"
}

Error Response

{
  "success": false,
  "error": "Card number is invalid",
  "errorCode": "E01040002",
  "paymentId": "pay_abc123",
  "orderId": "HTL-20260122-XYZ789"
}

Request Body

Example Request

const { data, error } = await supabase.functions.invoke('gmo-payment', {
  body: {
    action: 'capture',
    paymentId: 'pay_abc123',
    amount: 45000  // Partial capture
  }
});

Response

{
  "success": true,
  "paymentId": "pay_abc123",
  "status": "captured",
  "capturedAmount": 45000
}

Query Parameters

Response

{
  "success": true,
  "payment": {
    "id": "pay_abc123",
    "orderId": "HTL-20260122-XYZ789",
    "amount": 50000,
    "status": "captured",
    "paymentMethod": "credit",
    "cardBrand": "VISA",
    "cardLast4": "1111",
    "transactionId": "TXN-98765",
    "authorizedAt": "2026-01-22T10:30:00Z",
    "capturedAt": "2026-01-22T10:30:05Z",
    "createdAt": "2026-01-22T10:30:00Z"
  }
}

Payment Statuses

Request Body

Example Request

const { data, error } = await supabase.functions.invoke('gmo-payment', {
  body: {
    action: 'cancel',
    paymentId: 'pay_abc123',
    reason: 'Customer requested cancellation'
  }
});

Response

{
  "success": true,
  "paymentId": "pay_abc123",
  "status": "cancelled"
}

Base URL

Available APIs

Features

• Real-time availability and pricing
• Multi-property management
• Room type and rate plan configuration
• Reservation creation and management
• Guest services booking (rentals, lessons, etc.)
• Channel management integration

Documentation

Full RoomBoss API documentation: developers.roomboss.com

Authentication Method

RoomBoss API uses HTTP Basic Authentication or API Key authentication.

Option 1: API Key Header

GET /v1/locations HTTP/1.1
Host: api.roomboss.com
X-API-Key: your_roomboss_api_key
Content-Type: application/json

Option 2: Basic Auth

GET /v1/locations HTTP/1.1
Host: api.roomboss.com
Authorization: Basic base64(username:password)
Content-Type: application/json

JavaScript Example

// Using fetch with API Key
const response = await fetch('https://api.roomboss.com/v1/locations', {
    method: 'GET',
    headers: {
        'X-API-Key': process.env.ROOMBOSS_API_KEY,
        'Content-Type': 'application/json'
    }
});

const locations = await response.json();

Required Credentials

Query Parameters

Example Request

const response = await fetch('https://api.roomboss.com/v1/locations?active=true', {
    headers: {
        'X-API-Key': ROOMBOSS_API_KEY
    }
});

const { data } = await response.json();

Response

{
  "success": true,
  "data": [
    {
      "id": "loc_12345",
      "name": "Niseko Mountain Resort",
      "code": "NMR",
      "region": "niseko",
      "address": {
        "street": "123 Ski Lane",
        "city": "Kutchan",
        "prefecture": "Hokkaido",
        "postal_code": "044-0081",
        "country": "JP"
      },
      "coordinates": {
        "lat": 42.8048,
        "lng": 140.6874
      },
      "amenities": ["wifi", "parking", "ski_storage", "onsen"],
      "images": [
        "https://cdn.roomboss.com/locations/loc_12345/main.jpg"
      ],
      "active": true,
      "created_at": "2024-01-15T00:00:00Z"
    }
  ],
  "meta": {
    "total": 15,
    "page": 1,
    "per_page": 20
  }
}

Path Parameters

Example Request

const response = await fetch('https://api.roomboss.com/v1/locations/loc_12345/room-types', {
    headers: {
        'X-API-Key': ROOMBOSS_API_KEY
    }
});

const { data } = await response.json();

Response

{
  "success": true,
  "data": [
    {
      "id": "rt_001",
      "location_id": "loc_12345",
      "name": "Deluxe Suite",
      "code": "DLX",
      "description": "Spacious suite with mountain views",
      "max_occupancy": 4,
      "bedrooms": 2,
      "bathrooms": 1,
      "size_sqm": 65,
      "amenities": ["kitchen", "washer", "balcony", "mountain_view"],
      "images": [
        "https://cdn.roomboss.com/room-types/rt_001/main.jpg",
        "https://cdn.roomboss.com/room-types/rt_001/bedroom.jpg"
      ],
      "inventory_count": 5,
      "active": true
    },
    {
      "id": "rt_002",
      "location_id": "loc_12345",
      "name": "Standard Room",
      "code": "STD",
      "description": "Comfortable room for couples",
      "max_occupancy": 2,
      "bedrooms": 1,
      "bathrooms": 1,
      "size_sqm": 35,
      "amenities": ["kitchen", "washer"],
      "images": [],
      "inventory_count": 10,
      "active": true
    }
  ]
}

Query Parameters

Example Request

const params = new URLSearchParams({
    location_id: 'loc_12345',
    check_in: '2026-02-01',
    check_out: '2026-02-05',
    guests: 2
});

const response = await fetch(`https://api.roomboss.com/v1/availability?${params}`, {
    headers: {
        'X-API-Key': ROOMBOSS_API_KEY
    }
});

const { data } = await response.json();

Response

{
  "success": true,
  "data": {
    "location_id": "loc_12345",
    "check_in": "2026-02-01",
    "check_out": "2026-02-05",
    "nights": 4,
    "available_rooms": [
      {
        "room_type_id": "rt_001",
        "room_type_name": "Deluxe Suite",
        "available_units": 3,
        "rates": [
          {
            "rate_plan_id": "rp_standard",
            "rate_plan_name": "Standard Rate",
            "total_price": 120000,
            "currency": "JPY",
            "price_per_night": 30000,
            "breakdown": [
              { "date": "2026-02-01", "price": 30000 },
              { "date": "2026-02-02", "price": 30000 },
              { "date": "2026-02-03", "price": 30000 },
              { "date": "2026-02-04", "price": 30000 }
            ],
            "cancellation_policy": "free_until_7_days"
          }
        ]
      },
      {
        "room_type_id": "rt_002",
        "room_type_name": "Standard Room",
        "available_units": 5,
        "rates": [
          {
            "rate_plan_id": "rp_standard",
            "rate_plan_name": "Standard Rate",
            "total_price": 60000,
            "currency": "JPY",
            "price_per_night": 15000
          }
        ]
      }
    ]
  }
}

Path Parameters

Query Parameters

Example Request

const response = await fetch(
    'https://api.roomboss.com/v1/locations/loc_12345/rates?start_date=2026-02-01&end_date=2026-02-28',
    {
        headers: { 'X-API-Key': ROOMBOSS_API_KEY }
    }
);

const { data } = await response.json();

Response

{
  "success": true,
  "data": {
    "location_id": "loc_12345",
    "rate_plans": [
      {
        "id": "rp_standard",
        "name": "Standard Rate",
        "description": "Best available rate",
        "rates": [
          {
            "room_type_id": "rt_001",
            "room_type_name": "Deluxe Suite",
            "daily_rates": [
              { "date": "2026-02-01", "price": 30000, "min_stay": 1 },
              { "date": "2026-02-02", "price": 30000, "min_stay": 1 },
              { "date": "2026-02-07", "price": 45000, "min_stay": 2 }
            ]
          }
        ]
      },
      {
        "id": "rp_early_bird",
        "name": "Early Bird",
        "description": "Book 30+ days in advance",
        "discount_percent": 15,
        "rates": []
      }
    ]
  }
}

Request Body

Example Request

const response = await fetch('https://api.roomboss.com/v1/reservations', {
    method: 'POST',
    headers: {
        'X-API-Key': ROOMBOSS_API_KEY,
        'Content-Type': 'application/json'
    },
    body: JSON.stringify({
        location_id: 'loc_12345',
        room_type_id: 'rt_001',
        rate_plan_id: 'rp_standard',
        check_in: '2026-02-01',
        check_out: '2026-02-05',
        guests_count: 2,
        guest: {
            first_name: 'Taro',
            last_name: 'Yamada',
            email: 'taro@example.com',
            phone: '+81-90-1234-5678',
            country: 'JP'
        },
        special_requests: 'Late check-in around 8pm'
    })
});

const { data } = await response.json();

Response

{
  "success": true,
  "data": {
    "id": "res_abc123",
    "confirmation_number": "RB-2026-00123",
    "status": "confirmed",
    "location_id": "loc_12345",
    "room_type_id": "rt_001",
    "check_in": "2026-02-01",
    "check_out": "2026-02-05",
    "nights": 4,
    "guests_count": 2,
    "guest": {
      "first_name": "Taro",
      "last_name": "Yamada",
      "email": "taro@example.com"
    },
    "pricing": {
      "subtotal": 120000,
      "taxes": 12000,
      "total": 132000,
      "currency": "JPY"
    },
    "cancellation_policy": {
      "type": "free_until_7_days",
      "free_cancel_until": "2026-01-25T15:00:00Z",
      "penalty_amount": 30000
    },
    "created_at": "2026-01-20T10:30:00Z"
  }
}

Modify Reservation

Cancel Reservation

// Cancel a reservation
const response = await fetch('https://api.roomboss.com/v1/reservations/res_abc123', {
    method: 'DELETE',
    headers: { 'X-API-Key': ROOMBOSS_API_KEY }
});

// Response: { success: true, cancellation_fee: 0 }

List Services

Query Parameters

Example: Get Ski Rentals

const response = await fetch(
    'https://api.roomboss.com/v1/services?category=rentals&location_id=loc_12345',
    { headers: { 'X-API-Key': ROOMBOSS_API_KEY } }
);

const { data } = await response.json();

Response

{
  "success": true,
  "data": [
    {
      "id": "svc_ski_001",
      "category": "rentals",
      "name": "Ski & Boot Package",
      "description": "Premium ski and boot rental",
      "duration_type": "daily",
      "pricing": {
        "adult": 5500,
        "child": 3500,
        "currency": "JPY"
      },
      "options": [
        { "id": "opt_helmet", "name": "Helmet", "price": 1000 },
        { "id": "opt_poles", "name": "Poles", "price": 500 }
      ],
      "available": true
    },
    {
      "id": "svc_lesson_001",
      "category": "lessons",
      "name": "Private Ski Lesson",
      "description": "1-on-1 instruction",
      "duration_type": "hourly",
      "duration_hours": 2,
      "pricing": {
        "per_session": 18000,
        "currency": "JPY"
      },
      "max_participants": 1,
      "available": true
    }
  ]
}

Book Service

const response = await fetch('https://api.roomboss.com/v1/service-bookings', {
    method: 'POST',
    headers: {
        'X-API-Key': ROOMBOSS_API_KEY,
        'Content-Type': 'application/json'
    },
    body: JSON.stringify({
        service_id: 'svc_ski_001',
        date: '2026-02-02',
        quantity: {
            adult: 2,
            child: 1
        },
        options: ['opt_helmet'],
        guest: {
            first_name: 'Taro',
            last_name: 'Yamada',
            email: 'taro@example.com'
        },
        reservation_id: 'res_abc123' // Optional: link to accommodation
    })
});

GMO Webhook Endpoint

Webhook Events