Resource-oriented endpoints, explicit permissions, and predictable retries. Create an order from a quote, then let your application guide each traveler forward.

Keep your login or use Wincora authentication
Connect records with external references
Recover safely with idempotent requests

Read the order reference

POST/api/v1/tenant/ordersJSON

curl --request POST 'https://api.wincora.com/api/v1/tenant/orders' \
  --header 'X-Api-Key: YOUR_API_KEY' \
  --header 'Idempotency-Key: request-example-001' \
  --header 'Content-Type: application/json' \
  --data '{
  "quoteId": "quote_example",
  "externalReference": "booking-4387",
  "tripName": "November trip"
}'

const response = await fetch('https://api.wincora.com/api/v1/tenant/orders', {
  method: 'POST',
  headers: {
    "X-Api-Key": process.env.WINCORA_API_KEY,
    "Idempotency-Key": "request-example-001",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "quoteId": "quote_example",
    "externalReference": "booking-4387",
    "tripName": "November trip"
  })
});

if (!response.ok) throw new Error(await response.text());
const result = await response.json();

import os
import requests

response = requests.request(
    'POST',
    'https://api.wincora.com/api/v1/tenant/orders',
    headers={
      "X-Api-Key": os.environ["WINCORA_API_KEY"],
      "Idempotency-Key": "request-example-001",
      "Content-Type": "application/json"
    },
    json={
      "quoteId": "quote_example",
      "externalReference": "booking-4387",
      "tripName": "November trip"
    },
    timeout=30,
)
response.raise_for_status()
result = response.json()