Automation

Availability is public. Creating a booking needs an API key from the desk. Webhooks sign each body.

GET /api/v1/availability?date=YYYY-MM-DD&capacity=1
POST /api/v1/bookings with header Authorization: Bearer YOUR_KEY

JSON: booth, start (local Zagreb time, 2026-11-04T10:00), minutes, name, email. Add "payment": "test" only while test payments are on.

Webhooks send X-Quietly-Signature: sha256=HMAC of the raw body, using the endpoint secret. Events: booking.created, booking.paid, booking.started, booking.finished, booking.cancelled.

Links may carry utm_source, utm_medium, utm_campaign, utm_content, and utm_term. They are stored on the booking.