Hotel API Documentation

Request body

Example request

Copycurl -X POST "https://parto.pro.plus/api/properties/lookup" \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  -d '{"ids":[101, 202, 303]}'

Copyconst res = await fetch("https://parto.pro.plus/api/properties/lookup", {
  method: "POST",
  headers: {
    "Accept": "application/json",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({ ids: [101, 202, 303] }),
});
const json = await res.json();
console.log(json.data);

Copy$response = Http::acceptJson()->post('https://parto.pro.plus/api/properties/lookup', [
    'ids' => [101, 202, 303],
]);

$properties = $response->json('data');

Copyimport requests

r = requests.post(
    "https://parto.pro.plus/api/properties/lookup",
    json={"ids": [101, 202, 303]},
    headers={"Accept": "application/json"},
    timeout=10,
)
data = r.json()["data"]

Successful response  200

{
  "data": [
    {
      "id": 101,
      "name": "Grand Plaza Hotel",
      "rating": 4.5,
      "address": "12 Avenue de la Liberté",
      "postal_code": "75008",
      "phone": "+33 1 23 45 67 89",
      "url": "https://example.com/grand-plaza",
      "last_update": "2026-05-10T08:30:00+00:00",
      "location": {
        "latitude": 48.8738,
        "longitude": 2.295,
        "city":        { "id": 7,  "name": "Paris" },
        "destination": { "id": 21, "name": "Île-de-France" },
        "country_id": 33
      },
      "accommodation": { "id": 1, "name": "Hotel" },
      "chain":         { "id": 42, "name": "Grand Collection" },
      "facilities": [
        { "id": 5,  "name": "Free Wi-Fi", "group": { "id": 2, "name": "Internet" } },
        { "id": 14, "name": "Swimming Pool", "group": { "id": 9, "name": "Wellness" } }
      ],
      "images": [
        { "url": "https://cdn.example.com/p101/1.jpg", "thumbnail_url": "https://cdn.example.com/p101/1-thumb.jpg" }
      ]
    }
  ],
  "not_found": [303]
}

Validation errors  422

{
  "message": "The ids field is required.",
  "errors": {
    "ids": [
      "The ids field is required."
    ]
  }
}

• ids must be an array.
• ids must contain at least 1 element and at most 200.
• Every element of ids must be an integer.

Query parameters

Example request

Copycurl -G "https://parto.pro.plus/api/cities/search" \
  --data-urlencode "q=par" \
  --data-urlencode "limit=10" \
  -H "Accept: application/json"

Copyconst params = new URLSearchParams({ q: 'par', limit: 10 });
const res = await fetch("https://parto.pro.plus/api/cities/search?" + params, {
  headers: { "Accept": "application/json" },
});
const json = await res.json();
console.log(json.data);

Copy$response = Http::acceptJson()->get('https://parto.pro.plus/api/cities/search', [
    'q'     => 'par',
    'limit' => 10,
]);

$cities = $response->json('data');

Copyimport requests

r = requests.get(
    "https://parto.pro.plus/api/cities/search",
    params={"q": "par", "limit": 10},
    headers={"Accept": "application/json"},
    timeout=10,
)
cities = r.json()["data"]

Successful response  200

{
  "data": [
    {
      "id": 7,
      "external_id": 12345,
      "name": "Paris",
      "destination": { "id": 21, "name": "Île-de-France" },
      "country":     { "id": 33, "code": "FR", "name": "France" }
    },
    {
      "id": 82,
      "external_id": 67890,
      "name": "Parma",
      "destination": { "id": 114, "name": "Emilia-Romagna" },
      "country":     { "id": 39,  "code": "IT", "name": "Italy" }
    }
  ],
  "meta": {
    "query": "par",
    "count": 2,
    "limit": 10
  }
}

When the dump-all token p32414 is used, meta.limit is null.

Validation errors  422

• q is required and must be 1–100 characters.
• limit, if provided, must be an integer between 1 and 200.

Request body

Example request

Copycurl -X POST "https://parto.pro.plus/api/Authenticate/CreateSession" \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  -d '{
    "OfficeId": "1273298",
    "UserName": "API582716",
    "Password": "<sha512-hex-of-your-password>"
  }'

Successful response  200

Copy{
  "Error": null,
  "Success": true,
  "SessionId": "01492146-ae4c-f111-b885-00505682c602"
}

Invalid credentials  200

For security reasons, invalid credentials return HTTP 200 with Success:false (rather than 401), matching the upstream Parto behaviour:

{
  "Error": { "Id": "Err0102001", "Message": "Invalid login credentials supplied" },
  "Success": false,
  "SessionId": null
}

Session lifecycle

• Each SessionId is valid for 15 minutes from the time of last use.
• Every successful authenticated call extends the expiry by another 15 minutes (rolling window).
• An expired or unknown SessionId yields HTTP 401 with Err0102003.
• An inactive account yields HTTP 403 with Err0102004.

Computing the SHA-512 digest

Copy# bash
echo -n 'MyPlaintextPassword' | openssl dgst -sha512 | awk '{print $2}'

# php
echo hash('sha512', 'MyPlaintextPassword');

// javascript (Web Crypto)
const buf = await crypto.subtle.digest('SHA-512', new TextEncoder().encode(plaintext));
const hex = [...new Uint8Array(buf)].map(b => b.toString(16).padStart(2, '0')).join('');

Authentication

This endpoint requires a valid SessionId obtained from /api/Authenticate/CreateSession. Provide it either in the JSON body as "SessionId" or as the X-Session-Id request header.

Request body

Example request

Copycurl -X POST "https://parto.pro.plus/api/Hotel/HotelAvailability" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -d '{
    "SessionId": "01492146-ae4c-f111-b885-00505682c602",
    "CheckIn": "2026-05-24",
    "CheckOut": "2026-05-26",
    "NationalityId": "TR",
    "CityId": 924,
    "Occupancies": [
      { "AdultCount": 2, "ChildCount": 0, "ChildAges": [] }
    ]
  }'

Successful response  200

The upstream Parto response is returned verbatim — every field (Success, Error, SearchId, PricedItineraries[] with all of HotelId, RoomRates, HotelPolicy, ExtraCharge, Surcharges, Amenities, Rooms, BoardCode, Currency, TotalFare, etc.) is preserved as-is. The proxy only adds two things on top:

• A new Hotel key on each PricedItinerary containing the normalised local property record (or null if the upstream HotelId is not present in the local catalogue).
• A new top‑level Meta object with count (total itineraries), matched (how many had local data), and not_found (HotelIds with no local match).

Copy{
  // ── Everything below this line comes straight from Parto, untouched ──
  "Success": true,
  "Error": null,
  "SearchId": "abc-123-…",
  "PricedItineraries": [
    {
      "HotelId": 12952,
      "BoardCode": "BB",
      "Currency": "EUR",
      "TotalFare": 123.45,
      "RoomRates": [ /* full upstream room-rate objects */ ],
      "Rooms": [ /* full upstream rooms */ ],
      "HotelPolicy": [ /* … */ ],
      "ExtraCharge": [ /* … */ ],
      "Surcharges": [ /* … */ ],
      "Amenities": [ /* … */ ],
      // … any other fields returned by Parto are kept as-is …

      // ── Added by this proxy ──
      "Hotel": {
        "id": 4012,
        "external_id": 12952,
        "name": "Example Hotel",
        "rating": 4.5,
        "review_score": 8.7,
        "last_update": "2026-05-01T12:00:00+00:00",
        "contact": { "phone": "…", "fax": "…", "email": "…", "url": "…" },
        "address": {
          "line": "…",
          "postal_code": "34000",
          "city": { "id": 1, "external_id": 924, "name": "Istanbul" },
          "destination": { "id": 5, "external_id": 700, "name": "Sultanahmet" },
          "country": { "id": 1, "code": "TR", "name": "Türkiye" }
        },
        "location": { "latitude": 41.01, "longitude": 28.97 },
        "accommodation": { "id": 1, "external_id": 10, "name": "Hotel" },
        "chain": null,
        "facility_groups": [
          { "id": 3, "name": "Amenities", "facilities": [
            { "id": 11, "external_id": 2001, "name": "Free Wi-Fi" }
          ] }
        ],
        "images_count": 12,
        "images": [
          { "url": "…", "thumbnail_url": "…" }
        ]
      }
    }
  ],

  // ── Added by this proxy ──
  "Meta": {
    "count": 9,
    "matched": 8,
    "not_found": [99999]
  }
}

Validation errors  422

• CheckIn/CheckOut must be YYYY‑MM‑DD and CheckOut must be after CheckIn.
• Exactly one of HotelId, HotelIdList, CityId must be provided.
• Per occupancy, ChildAges length must match ChildCount.

Upstream errors  502

If the upstream Parto CRS is unreachable or returns an unexpected error, the response is { "Success": false, "Error": "…" } with HTTP 502. Upstream business errors (e.g. invalid filters) are passed through with HTTP 200 and Success:false.

Authentication

Requires a valid SessionId obtained from /api/Authenticate/CreateSession. Provide it either in the JSON body as "SessionId" or via the X-Session-Id request header.

Request body

Example request

Copycurl -X POST "https://parto.pro.plus/api/Hotel/HotelCheckRate" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -d '{
    "SessionId": "914363ab-981f-47f1-b6e5-6243a173df08",
    "FareSourceCode": "<paste from availability>",
    "FixStayId": null,
    "Nationality": "IR"
  }'

Successful response  200

The upstream Parto response is returned verbatim — every field (Success, Error, PricedItinerary, HotelFare, HotelPolicy, RoomRates, etc.) is preserved as-is. The proxy only adds a Hotel key on each PricedItinerary (singular or plural) carrying the normalised local property record (or null if the upstream HotelId is not present in the local catalogue) — the same shape returned by /Hotel/HotelAvailability.

Validation errors  422

• FareSourceCode is required.
• Nationality is required and must be a 2-letter ISO country code.

Upstream errors  502

If the upstream Parto CRS is unreachable or returns an unexpected error, the response is { "Success": false, "Error": "…" } with HTTP 502. Upstream business errors (e.g. expired FareSourceCode) are passed through with HTTP 200 and Success:false.