/api/v1/b2c/

Integrate with versioned contracts.

GestaProp contract overview and B2C v1 API examples. Every operation states whether it is supported or unavailable; versioned schemas govern the integration.

OpenAPI 3.1 v1 es · en · fr · pt

POST /api/v1/b2c/offers Fictional data

curl -X POST https://gestaprop.com/api/v1/b2c/offers \
  -H "Content-Type: application/json" \
  -H "Origin: https://hotel.example" \
  -H "X-Public-Site-Id: pst_hotel-demo" \
  -H "Authorization: Bearer <accessToken>" \
  -d '{
    "propertyId": 42,
    "checkInDate": "2026-11-14",
    "checkOutDate": "2026-11-16",
    "occupancy": { "adults": 2, "childrenAges": [] },
    "locale": "en",
    "currency": "MXN"
  }'

Obtain accessToken through POST /api/v1/b2c/access for the verified publicSiteId and HTTPS origin. Replace the example site, property and dates; this ephemeral token is not a server secret key.

Documentation v1

Supported Not available

01 Supported

Authentication and keys Publishable key per site, ephemeral token bound to the exact HTTPS origin, and a server-to-server secret stored only as a hash.

02 Supported

Catalog and offers Query properties, units and a signed quote: per-night breakdown, discounts, coupon, extras and taxes, with an expiry. The checkout always requotes. catalog.read · offers.quote

03 Supported

Hosted checkout Returns an idempotent payment URL from a verifiable quote. It is not a paid booking: only the provider’s webhook confirms. checkout.initiate

04 Supported

Widget Install via a versioned, immutable CDN, with SRI integrity and Shadow DOM. Prefill dates and occupancy from the URL. Migration from gestawidget.

05 Supported

Contracts and vectors Each public contract has its versioned JSON Schema and test vectors: catalog, offer, quote, referral, checkout launch and session. v1

06 Supported

PMS Read published ARI and GestaProp bookings, scoped per property with a cursor; excludes payments, documents and tax details. pms.read

07 Not available

Webhooks Signed events to your server.

Errors and quotas Stable error codes, limits per credential, an idempotency key on every write and safe retries.

Changelog Changes per version. Breaking changes go to /v2/.

API keys

Keys are created in the console, not here.

An Admin, Manager or Solo Pago owner creates and revokes keys from the GestaProp console, scoped per property.

Go to console

Shown onceThe secret is shown at creation; afterwards you only see the suffix.

Explicit scopesEach key carries only the permissions it needs.

Immediate revocationNo automatic expiry; revoke whenever you decide.

Never in the browserServer-to-server secrets never go in snippets or the widget.

Verified originThe widget only works on domains you proved you control, by TXT record or verified file.

No third-party writesNo key creates a confirmed booking or declares a total; there is no pms.write.

catalog.read offers.quote checkout.initiate pms.read

Let's talk about your operation

Message us on WhatsApp or leave your details. A person from our sales team will reply.

Chat on WhatsApp Write to us