Skip to main content

Authentication

Breeze NDC/XML APIs are handled by the Breeze Offer Order service. Use your partner API key to obtain a bearer token from:

POST /auth/token
x-api-key: <api-key>
body: none

Then send NDC/XML requests with the bearer token:

POST /ndc/{version}/{EndpointName}
Authorization: Bearer <token>
Content-Type: application/xml

NDC/XML endpoint requests do not require x-api-key. Sending x-api-key with the bearer token has no effect.

Wire format​

NDC/XML requests must use Content-Type: application/xml or Content-Type: text/xml. Other content types are rejected with ERR-1010.

Request bodies are limited to 1 MiB. Larger requests are rejected with ERR-1009.

Submit unsigned XML. Requests carrying an XML digital signature element are rejected with ERR-1004; Breeze does not verify XML signatures.

Your API key determines access granted to the issued token:

  • allowed API request volumes
  • allowed fare and ancillary products
  • allowed IATA agency IDs / private organization IDs
  • read-only permissions / full transaction permissions

Base URLs​

EnvironmentBase URL
Productionhttps://api.flybreeze.com/breeze-offer-order
Staginghttps://api-staging.flybreeze.com/breeze-offer-order

For service monitoring, use our public health endpoint.