TRIP / API V1
Build calm, useful travel automations
A clear, owner-scoped API for trip tools, integrations, and AI agents. Start with read access and add writes only when a person approves the plan.
Authentication
Personal access tokens are shown once and sent only in the Authorization header. Never place a token in a URL.
Authorization: Bearer trip_pat_…Small permissions
Use the smallest scope set that completes the job. Every resource is restricted to the token owner's trips.
trips:read · trips:write · token:inspectReady for agents
Deterministic JSON, stable error codes, pagination, idempotent writes, and an OpenAPI document make planning and confirmation predictable.
A two-minute quickstart
Create a token in settings, save it in a server-side secret store, then call the introspection endpoint before your first trip request.
curl https://trip.gumyo.net/api/v1/trips \
-H 'Authorization: Bearer trip_pat_REDACTED'Safety by default
Read first. Summarize destructive changes and ask for confirmation. Use a new idempotency key for each new mutation and the same key for retries.
Predictable limits
The default per-token limit is 60 reads and 20 writes per minute. Respect rate-limit headers and back off on 429 responses.