API reference

The ThaiHotelMinder workspace exposes a small, read-only REST API back to Subscriber hotel IT teams. In parallel, our advisory modules consume the HotelMinder Advisory Directory API via a documented set of scopes. This page documents both directions.

Workspace API base URL

https://api.thaihotelminder.org/v1 — TLS 1.3 only. Authentication with a workspace-scoped bearer token issued from Settings → API keys.

Endpoints (read-only)

• GET /modules — list active advisory modules on the workspace.
• GET /packs — list advisory packs delivered in the last 24 months.
• GET /packs/:id — fetch a single pack (JSON + signed PDF URL).
• GET /parity/breaches — list unresolved parity breaches (Parity Watchtower module).
• GET /ops/brief/:date — fetch a Daily Operations Brief for a given date.
• GET /pdpa/requests — list open PDPA data-subject requests.

Rate limits

60 requests per minute per token, 5,000 per day. Bursting up to 120 requests over a rolling 60-second window is allowed. Exceeding these limits returns HTTP 429 with a Retry-After header.

HotelMinder scopes we consume

• reservations.read — required for every module.
• rate_plans.read — required for revenue and parity modules.
• distribution.read — required for Channel Tuning and Parity Watchtower.
• guest_profiles.read — required for PDPA Guest Consent, Review Response.
• reports.read — required for report packs.

No write scopes are requested by default. Optional write-back for Channel Tuning and Monsoon Revenue Model requires explicit workspace opt-in from Settings → Write approvals.

Versioning

Semantic versioning. Breaking changes are announced 90 days in advance in the workspace and documented in the changelog. Previous major versions are supported for 12 months after a new major release.