API Families

Visitor API (/api/v1/*): Canonical anonymous endpoints for availability, bookings, and page form submissions. These routes are safe for visitor-side code and are rate limited by IP.

Share-link API (/api/public/*): Public link resolution and form configuration used by GoodInbound share pages. The response-creation and step-submission variants are retained for compatibility; new direct integrations should prefer /api/v1/*.

Management API (/api/projects/:projectId/*): Server-side project administration with a project-scoped API key. Never expose this credential in a browser, widget, or public form.