API reference

REST API for everything in the dashboard

OpenAPI spec, JWT auth, idempotent writes. Build integrations on top of BookFlow without scraping the dashboard.

Base URL

https://booking-api.netwit.ca

All endpoints return JSON. Authenticated endpoints require a Bearer token.

curl https://booking-api.netwit.ca/api/owner/services \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..."

Get a token via POST /api/auth/login. Tokens expire in 7 days.

List this week's bookings:

curl https://booking-api.netwit.ca/api/owner/bookings?from=2026-08-01&to=2026-08-07 \
  -H "Authorization: Bearer $TOKEN" | jq .data[].customerName

100 requests per minute per token, 1000 per hour. Exceeding the limit returns 429 Too Many Requests with a Retry-After header.

Every endpoint with request/response shapes, auth requirements, and example payloads. Includes the public, owner, customer, and admin APIs.