Skip to content
/
API changelog
Last updated

API Changelog

Keep track of the latest changes made to Spotnana APIs. This document will be updated to list new additions, modifications, and deprecations made to the APIs.

Showing 15 of 34 releases

October 29, 2026

Custom FieldUser ManagementUpdates

Updates

Custom Field

  • Enum inlineQCFailureRules › ruleType: added BAD_SEGMENT_STATUS_RULE, DIVIDED_PNR_RULE in POST /v3/applicable-custom-fields — request (path: bookingContext › inlineQCFailureRules › ruleType)
  • Enum predicates › ruleTypes: added BAD_SEGMENT_STATUS_RULE, DIVIDED_PNR_RULE in the following APIs:
    • POST /v3/companies/{companyId}/custom-fields/{customFieldId}/arms — request (path: audiences › predicates › ruleTypes)
    • POST /v3/companies/{companyId}/custom-fields/{customFieldId}/arms/list — 200 response (path: arms › audiences › predicates › ruleTypes)
    • GET and PUT /v3/companies/{companyId}/custom-fields/{customFieldId}/arms/{armId} — request and 200 response (path: audiences › predicates › ruleTypes)

User Management

  • Added property orgType in GET /v2/users/{userId} — 200 response

October 23, 2026

Access ManagementCustom FieldDocumentTemplateUser ManagementWebhook SubscriptionUpdates

Updates

Access Management

  • Enum permissions › actions: added UNMASK in the following APIs:
    • POST /v3/companies/{companyId}/roles — 200 response (path: roles › permissions › actions)
    • POST /v3/companies/{companyId}/user-groups/list — request (path: filters › permissions › actions)
    • POST /v3/companies/{companyId}/user-groups/{groupId}/roles — 200 response (path: roles › role › permissions › actions)
    • POST /v3/roles — request
    • GET and PUT /v3/roles/{roleId} — request and 200 response
    • POST /v3/users/{userId}/entity-permissions — 200 response
    • GET /v3/users/{userId}/rbac-info — 200 response
    • POST /v3/users/{userId}/roles — 200 response (path: roles › role › permissions › actions)
    • POST /v3/users/{userId}/user-groups — request (path: filters › permissions › actions)

Custom Field

  • Added property options › optionId in POST /v3/companies/{companyId}/custom-fields/{customFieldId}/arms/{armId}/option-list — 200 response
  • Added property options › outcomes in POST /v3/companies/{companyId}/custom-fields/{customFieldId}/arms/{armId}/option-list — 200 response
  • Added property preSelectedOptions › optionId in the following APIs:
    • POST /v3/applicable-custom-fields — 200 response (path: customFields › action › preSelectedOptions › optionId)
    • POST /v3/companies/{companyId}/custom-fields/{customFieldId}/arms — request (path: action › preSelectedOptions › optionId)
    • POST /v3/companies/{companyId}/custom-fields/{customFieldId}/arms/list — 200 response (path: arms › action › preSelectedOptions › optionId)
    • GET and PUT /v3/companies/{companyId}/custom-fields/{customFieldId}/arms/{armId} — request and 200 response (path: action › preSelectedOptions › optionId)
  • Added property preSelectedOptions › outcomes in POST /v3/companies/{companyId}/custom-fields/{customFieldId}/arms — request (path: action › preSelectedOptions › outcomes)
  • Added property selectedOptions › optionId in POST /v3/applicable-custom-fields — request (path: customFieldResponsesContext › customFieldResponses › selectedOptions › optionId)
  • Added property toUpdate › optionId in PATCH /v3/companies/{companyId}/custom-fields/{customFieldId}/option-groups/{optionGroupId} — request
  • Added property toUpdate › outcomes in PATCH /v3/companies/{companyId}/custom-fields/{customFieldId}/option-groups/{optionGroupId} — request

Document

  • Enum documentMetadata › documentType: added AI_PLATFORM_ATTACHMENTS in the following APIs:
    • GET and POST /v2/documents — request and 200 response (path: documents › documentMetadata › documentType)
    • GET /v2/documents/{documentId} — 200 response (path: document › documentMetadata › documentType)

Template

  • Enum documentMetadata › documentType: added AI_PLATFORM_ATTACHMENTS in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › group › metadata › documents › documentMetadata › documentType)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › group › metadata › documents › documentMetadata › documentType)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › group › metadata › documents › documentMetadata › documentType)
  • Added property selectedOptions › optionId in the following APIs:
    • POST /v2/event-templates — request (path: customFieldV3Responses › selectedOptions › optionId)
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › customFieldV3Responses › selectedOptions › optionId)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › customFieldV3Responses › selectedOptions › optionId)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › customFieldV3Responses › selectedOptions › optionId)
    • PUT /v2/event-templates/{templateId}/custom-field-responses — request (path: customFieldV3Responses › selectedOptions › optionId)
    • POST /v2/event-templates/{templateId}/edit-basic-info — request (path: eventCustomFieldV3Responses › selectedOptions › optionId)
  • Added property unusedCreditInfo › countryCode in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › countryCode)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › countryCode)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › countryCode)
  • Added property unusedCreditInfo › creditFareBreakdown in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › creditFareBreakdown)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › creditFareBreakdown)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › creditFareBreakdown)

User Management

  • Enum permissions › actions: added UNMASK in GET /v3/users/{userId}/rbac-info — 200 response

Webhook Subscription

  • Enum eventTypes: added EXPENSE_PNR_V1 in the following APIs:
    • POST /v3/webhooks/subscriptions — request
    • GET and PATCH /v3/webhooks/subscriptions/{subscriptionId} — request and 200 response
  • Enum subscriptions › eventTypes: added EXPENSE_PNR_V1 in GET /v3/webhooks/subscriptions/subscriber/{subscriberId}/list — 200 response

October 15, 2026

Access ManagementCustom FieldEventTemplateUser ManagementUpdates

Updates

Access Management

  • Enum applicableScopes › predicateType: added PERSONA in POST /v3/companies/{companyId}/roles/applicable-scopes — 200 response
  • oneOfaudiences › predicates: added a new object variant in the following APIs:
    • POST and PATCH /v3/companies/{companyId}/user-groups/{groupId}/roles — request and 200 responseappears at:
      • roles › scope › audiences › predicates
      • rolesToAdd › scope › audiences › predicates
    • POST and PATCH /v3/users/{userId}/roles — request and 200 responseappears at:
      • roles › scope › audiences › predicates
      • rolesToAdd › scope › audiences › predicates
  • oneOfaudiences › predicates: added option PERSONA in the following APIs:
    • POST and PATCH /v3/companies/{companyId}/user-groups/{groupId}/roles — request and 200 responseappears at:
      • roles › scope › audiences › predicates
      • rolesToAdd › scope › audiences › predicates
    • POST and PATCH /v3/users/{userId}/roles — request and 200 responseappears at:
      • roles › scope › audiences › predicates
      • rolesToAdd › scope › audiences › predicates
  • Added property platformGroupType in GET /v3/companies/{companyId}/user-groups/{groupId} — 200 response
  • oneOfselectedAudience › predicates: added a new object variant in POST /v3/companies/{companyId}/roles/applicable-scopes — request
  • oneOfselectedAudience › predicates: added option PERSONA in POST /v3/companies/{companyId}/roles/applicable-scopes — request
  • Added property userGroups › platformGroupType in the following APIs:
    • POST /v3/companies/{companyId}/user-groups/list — 200 response
    • POST /v3/users/{userId}/user-groups — 200 response

Custom Field

  • Added property captureStep in the following APIs:
    • POST /v3/companies/{companyId}/custom-fields — request
    • GET and PUT /v3/companies/{companyId}/custom-fields/{customFieldId} — request and 200 response
  • Added property fields › captureStep in POST /v3/companies/{companyId}/custom-fields/list — 200 response
  • Added property filter › captureSteps in POST /v3/companies/{companyId}/custom-fields/list — request

Event

  • Added property images › metadata in the following APIs:
    • POST /v2/events — request (path: bookingGuidelines › hotelBookingGuideLine › allowedHotels › imageSets › imageGroup › images › metadata)
    • POST /v2/events/bulk-edit — request (path: eventsToUpdate › eventBookingGuidelines › bookingGuidelines › hotelBookingGuideLine › allowedHotels › imageSets › imageGroup › images › metadata)
    • POST /v2/events/list — 200 response (path: events › group › bookingGuidelines › hotelBookingGuideLine › allowedHotels › imageSets › imageGroup › images › metadata)
    • GET /v2/events/read-by-external-id — 200 response (path: event › group › bookingGuidelines › hotelBookingGuideLine › allowedHotels › imageSets › imageGroup › images › metadata)
    • POST /v2/events/summaries — 200 response (path: tripEventSummaries › travelerEventSummary › bookingGuidelines › hotelBookingGuideLine › allowedHotels › imageSets › imageGroup › images › metadata)
    • GET /v2/events/{eventId} — 200 response (path: event › group › bookingGuidelines › hotelBookingGuideLine › allowedHotels › imageSets › imageGroup › images › metadata)
    • POST /v2/events/{eventId}/edit-booking-guidelines — request (path: bookingGuidelines › hotelBookingGuideLine › allowedHotels › imageSets › imageGroup › images › metadata)
  • Added property logo › metadata in POST /v2/events — requestappears at:
    • newTraveler › personalInfo › emergencyContactInfo › userOrgId › tmcBasicInfo › bookingTmc › logo › metadata
    • newTraveler › personalInfo › emergencyContactInfo › userOrgId › tmcBasicInfo › contractingTmc › logo › metadata
  • Added property profilePicture › metadata in POST /v2/events — request (path: newTraveler › personalInfo › profilePicture › metadata)

Template

  • Added property images › metadata in the following APIs:
    • POST /v2/event-templates — request (path: bookingGuidelines › hotelBookingGuideLine › allowedHotels › imageSets › imageGroup › images › metadata)
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › group › bookingGuidelines › hotelBookingGuideLine › allowedHotels › imageSets › imageGroup › images › metadata)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › group › bookingGuidelines › hotelBookingGuideLine › allowedHotels › imageSets › imageGroup › images › metadata)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › group › bookingGuidelines › hotelBookingGuideLine › allowedHotels › imageSets › imageGroup › images › metadata)
    • POST /v2/event-templates/{templateId}/edit-booking-guidelines — request (path: bookingGuidelines › hotelBookingGuideLine › allowedHotels › imageSets › imageGroup › images › metadata)

User Management

  • Added property logo › metadata in the following APIs:
    • POST /v2/users — requestappears at:
      • personalInfo › emergencyContactInfo › userOrgId › tmcBasicInfo › bookingTmc › logo › metadata
      • personalInfo › emergencyContactInfo › userOrgId › tmcBasicInfo › contractingTmc › logo › metadata
    • GET and PUT /v2/users/{userId} — request and 200 responseappears at:
      • personalInfo › emergencyContactInfo › userOrgId › tmcBasicInfo › bookingTmc › logo › metadata
      • personalInfo › emergencyContactInfo › userOrgId › tmcBasicInfo › contractingTmc › logo › metadata
    • GET and PUT /v2/users/{userId}/personal-info — request and 200 responseappears at:
      • emergencyContactInfo › userOrgId › tmcBasicInfo › bookingTmc › logo › metadata
      • emergencyContactInfo › userOrgId › tmcBasicInfo › contractingTmc › logo › metadata
  • Added property profilePicture › metadata in the following APIs:
    • POST /v2/users — request (path: personalInfo › profilePicture › metadata)
    • GET, PUT, and PATCH /v2/users/{userId} — request and 200 response (path: personalInfo › profilePicture › metadata)
    • GET and PUT /v2/users/{userId}/personal-info — request and 200 response
    • POST /v3/users/list — 200 response (path: users › personalDetail › profilePicture › metadata)

October 08, 2026

EventPolicyTemplateUser ManagementWebhook SubscriptionUpdates

Updates

Event

  • Enum paymentSourceAttributes › allowedThirdPartySources: added SIXT in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
  • Enum rateCodeOverrides › supplier: added SIXT in the following APIs:
    • POST /v2/events — request (path: tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/events/bulk-edit — request (path: eventsToUpdate › eventBasicInfo › tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/events/list — 200 response (path: events › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/events/read-by-external-id — 200 response (path: event › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/events/{eventId} — 200 response (path: event › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/events/{eventId}/edit-basic-info — request (path: tripOverrides › rateCodeOverrides › supplier)
  • Enum secondaryServiceProviderTmcs › supplier: added SIXT in POST /v2/events — request (path: newTraveler › personalInfo › emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)
  • Enum unusedCreditInfo › source: added SIXT in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
  • Added property userId in POST /v2/events/{eventId}/register — request

Policy

  • Enum notAllowedConditions › blockedThirdPartySources: added SIXT in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: rules › policyValue › universalProps › airAncillaryProps › ancillaryWithConditions › notAllowedConditions › blockedThirdPartySources)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: rules › policyValue › universalProps › airAncillaryProps › ancillaryWithConditions › notAllowedConditions › blockedThirdPartySources)

Template

  • Enum paymentSourceAttributes › allowedThirdPartySources: added SIXT in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
  • Enum rateCodeOverrides › supplier: added SIXT in the following APIs:
    • POST /v2/event-templates — request (path: tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/event-templates/{templateId}/edit-basic-info — request (path: tripOverrides › rateCodeOverrides › supplier)
  • Enum unusedCreditInfo › source: added SIXT in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)

User Management

  • Enum secondaryServiceProviderTmcs › supplier: added SIXT in the following APIs:
    • POST /v2/users — request (path: personalInfo › emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)
    • GET and PUT /v2/users/{userId} — request and 200 response (path: personalInfo › emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)
    • GET and PUT /v2/users/{userId}/personal-info — request and 200 response (path: emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)

Webhook Subscription

  • added scope query parameter in GET /v3/webhooks/subscriptions/subscriber/{subscriberId}/list
  • Added property claimedAt in GET /v3/webhooks/subscriptions/{subscriptionId} — 200 response
  • Added property claimedByUserId in GET /v3/webhooks/subscriptions/{subscriptionId} — 200 response
  • Added property provisionedByOrg in GET /v3/webhooks/subscriptions/{subscriptionId} — 200 response
  • Added property subscriberName in GET /v3/webhooks/subscriptions/{subscriptionId} — 200 response
  • Added property subscriptions › claimedAt in GET /v3/webhooks/subscriptions/subscriber/{subscriberId}/list — 200 response
  • Added property subscriptions › claimedByUserId in GET /v3/webhooks/subscriptions/subscriber/{subscriberId}/list — 200 response
  • Added property subscriptions › provisionedByOrg in GET /v3/webhooks/subscriptions/subscriber/{subscriberId}/list — 200 response
  • Added property subscriptions › subscriberName in GET /v3/webhooks/subscriptions/subscriber/{subscriberId}/list — 200 response

October 01, 2026

EventTemplateUpdatesNew endpoints

Updates

Event

  • Added property enableRegisterLink in the following APIs:
    • POST /v2/events — request
    • POST /v2/events/{eventId}/edit-basic-info — request
  • Added property eventBasicInfo › enableRegisterLink in POST /v2/events/bulk-edit — request (path: eventsToUpdate › eventBasicInfo › enableRegisterLink)
  • Added property metadata › enableRegisterLink in the following APIs:
    • POST /v2/events/list — 200 response (path: events › group › metadata › enableRegisterLink)
    • GET /v2/events/read-by-external-id — 200 response (path: event › group › metadata › enableRegisterLink)
    • GET /v2/events/{eventId} — 200 response (path: event › group › metadata › enableRegisterLink)

Template

  • Added property metadata › enableRegisterLink in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › group › metadata › enableRegisterLink)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › group › metadata › enableRegisterLink)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › group › metadata › enableRegisterLink)

New endpoints

Event

  • POST /v2/events/{eventId}/register

September 24, 2026

DocumentEventTemplateUpdates

Updates

Document

  • Enum documentMetadata › documentType: added AI_SKILL_FILE in the following APIs:
    • GET and POST /v2/documents — request and 200 response (path: documents › documentMetadata › documentType)
    • GET /v2/documents/{documentId} — 200 response (path: document › documentMetadata › documentType)

Event

  • Enum documentMetadata › documentType: added AI_SKILL_FILE in the following APIs:
    • POST /v2/events — request (path: documents › documentMetadata › documentType)
    • POST /v2/events/bulk-edit — request (path: eventsToUpdate › eventBasicInfo › documents › documentMetadata › documentType)
    • POST /v2/events/list — 200 response (path: events › group › metadata › documents › documentMetadata › documentType)
    • GET /v2/events/read-by-external-id — 200 response (path: event › group › metadata › documents › documentMetadata › documentType)
    • POST /v2/events/summaries — 200 response (path: tripEventSummaries › travelerEventSummary › documents › documentMetadata › documentType)
    • GET /v2/events/{eventId} — 200 response (path: event › group › metadata › documents › documentMetadata › documentType)
    • POST /v2/events/{eventId}/edit-basic-info — request (path: documents › documentMetadata › documentType)

Template

  • Enum documentMetadata › documentType: added AI_SKILL_FILE in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › group › metadata › documents › documentMetadata › documentType)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › group › metadata › documents › documentMetadata › documentType)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › group › metadata › documents › documentMetadata › documentType)

September 18, 2026

EventTemplateUser ManagementUpdatesNew endpoints

Updates

Event

  • Enum nationalDoc › type: added CIN, CPF, MTP, NID in POST /v2/events — request (path: newTraveler › personalInfo › identityDocs › nationalDoc › type)
  • Enum thirdPartyHotelCodes › hotelCodeType: added AMADEUS_GDS, BOOKING_COM, HOTEL_HUB, PREMIER_INN, TRAVELODGE in the following APIs:
    • POST /v2/events — request (path: bookingGuidelines › hotelBookingGuideLine › allowedHotels › thirdPartyHotelCodes › hotelCodeType)
    • POST /v2/events/bulk-edit — request (path: eventsToUpdate › eventBookingGuidelines › bookingGuidelines › hotelBookingGuideLine › allowedHotels › thirdPartyHotelCodes › hotelCodeType)
    • POST /v2/events/list — 200 response (path: events › group › bookingGuidelines › hotelBookingGuideLine › allowedHotels › thirdPartyHotelCodes › hotelCodeType)
    • GET /v2/events/read-by-external-id — 200 response (path: event › group › bookingGuidelines › hotelBookingGuideLine › allowedHotels › thirdPartyHotelCodes › hotelCodeType)
    • POST /v2/events/summaries — 200 response (path: tripEventSummaries › travelerEventSummary › bookingGuidelines › hotelBookingGuideLine › allowedHotels › thirdPartyHotelCodes › hotelCodeType)
    • GET /v2/events/{eventId} — 200 response (path: event › group › bookingGuidelines › hotelBookingGuideLine › allowedHotels › thirdPartyHotelCodes › hotelCodeType)
    • POST /v2/events/{eventId}/edit-booking-guidelines — request (path: bookingGuidelines › hotelBookingGuideLine › allowedHotels › thirdPartyHotelCodes › hotelCodeType)

Template

  • Enum thirdPartyHotelCodes › hotelCodeType: added AMADEUS_GDS, BOOKING_COM, HOTEL_HUB, PREMIER_INN, TRAVELODGE in the following APIs:
    • POST /v2/event-templates — request (path: bookingGuidelines › hotelBookingGuideLine › allowedHotels › thirdPartyHotelCodes › hotelCodeType)
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › group › bookingGuidelines › hotelBookingGuideLine › allowedHotels › thirdPartyHotelCodes › hotelCodeType)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › group › bookingGuidelines › hotelBookingGuideLine › allowedHotels › thirdPartyHotelCodes › hotelCodeType)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › group › bookingGuidelines › hotelBookingGuideLine › allowedHotels › thirdPartyHotelCodes › hotelCodeType)
    • POST /v2/event-templates/{templateId}/edit-booking-guidelines — request (path: bookingGuidelines › hotelBookingGuideLine › allowedHotels › thirdPartyHotelCodes › hotelCodeType)

User Management

  • Enum nationalDoc › type: added CIN, CPF, MTP, NID in the following APIs:
    • POST /v2/users — request (path: personalInfo › identityDocs › nationalDoc › type)
    • GET and PUT /v2/users/{userId} — request and 200 response (path: personalInfo › identityDocs › nationalDoc › type)
    • GET and PUT /v2/users/{userId}/personal-info — request and 200 response (path: identityDocs › nationalDoc › type)

New endpoints

User Management

  • PATCH /v2/users/{userId}

September 10, 2026

AuthCustom FieldEventPolicyTemplateUser ManagementUpdatesNew endpointsNew API

Updates

Auth

  • Added property name in POST /v2/api-users — request
  • Updated orgId › description in POST /v2/api-users — request
  • Removed property role › default in POST /v2/api-users — request
  • Updated tmcId › description in POST /v2/api-users — request
  • Added property userId in POST /v2/api-users — 200 response

Event

  • Removed property provider › readOnly in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider › readOnly)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider › readOnly)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider › readOnly)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider › readOnly)

Policy

  • Added property props › rejectMixCabinFlights in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: airPolicyRules › lowestLogicalFare › props › rejectMixCabinFlights)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: airPolicyRules › lowestLogicalFare › props › rejectMixCabinFlights)
  • Added property props › sameFlightOnlyDomestic in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: airPolicyRules › lowestLogicalFare › props › sameFlightOnlyDomestic)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: airPolicyRules › lowestLogicalFare › props › sameFlightOnlyDomestic)
  • Added property props › sameFlightOnlyInternational in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: airPolicyRules › lowestLogicalFare › props › sameFlightOnlyInternational)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: airPolicyRules › lowestLogicalFare › props › sameFlightOnlyInternational)

Template

  • Removed property provider › readOnly in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider › readOnly)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider › readOnly)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider › readOnly)

New endpoints

User Management

  • GET and POST /v2/users/{userId}/managed-travelers
  • POST /v2/users/{userId}/managed-travelers/remove
  • POST /v2/users/{userId}/managed-travelers/update
  • POST /v2/users/{userId}/travel-arrangers/approve

New API

Custom Field

  • Custom Field is now available

September 04, 2026

DocumentEventPolicyTemplateUser ManagementUpdatesNew endpoints

Updates

Document

  • Enum documentMetadata › documentType: added KNOWLEDGE_BASE in the following APIs:
    • GET and POST /v2/documents — request and 200 response (path: documents › documentMetadata › documentType)
    • GET /v2/documents/{documentId} — 200 response (path: document › documentMetadata › documentType)

Event

  • airlineName is no longer required in the following APIs:
    • POST /v2/events/list — 200 response
    • GET /v2/events/payment-sources — 200 response
    • GET /v2/events/read-by-external-id — 200 response
    • GET /v2/events/{eventId} — 200 response
  • Enum documentMetadata › documentType: added KNOWLEDGE_BASE in the following APIs:
    • POST /v2/events — request (path: documents › documentMetadata › documentType)
    • POST /v2/events/bulk-edit — request (path: eventsToUpdate › eventBasicInfo › documents › documentMetadata › documentType)
    • POST /v2/events/list — 200 response (path: events › group › metadata › documents › documentMetadata › documentType)
    • GET /v2/events/read-by-external-id — 200 response (path: event › group › metadata › documents › documentMetadata › documentType)
    • POST /v2/events/summaries — 200 response (path: tripEventSummaries › travelerEventSummary › documents › documentMetadata › documentType)
    • GET /v2/events/{eventId} — 200 response (path: event › group › metadata › documents › documentMetadata › documentType)
    • POST /v2/events/{eventId}/edit-basic-info — request (path: documents › documentMetadata › documentType)
  • Enum paymentSourceAttributes › allowedThirdPartySources: added HILTON in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
  • Added property paymentSourceAttributes › supplierPaymentTypes in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
  • Enum rateCodeOverrides › supplier: added HILTON in the following APIs:
    • POST /v2/events — request (path: tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/events/bulk-edit — request (path: eventsToUpdate › eventBasicInfo › tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/events/list — 200 response (path: events › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/events/read-by-external-id — 200 response (path: event › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/events/{eventId} — 200 response (path: event › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/events/{eventId}/edit-basic-info — request (path: tripOverrides › rateCodeOverrides › supplier)
  • Enum secondaryServiceProviderTmcs › supplier: added HILTON in POST /v2/events — request (path: newTraveler › personalInfo › emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)
  • Enum unusedCreditInfo › source: added HILTON in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)

Policy

  • Enum notAllowedConditions › blockedThirdPartySources: added HILTON in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: rules › policyValue › universalProps › airAncillaryProps › ancillaryWithConditions › notAllowedConditions › blockedThirdPartySources)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: rules › policyValue › universalProps › airAncillaryProps › ancillaryWithConditions › notAllowedConditions › blockedThirdPartySources)

Template

  • airlineName is no longer required in the following APIs:
    • POST /v2/event-templates/list — 200 response
    • GET /v2/event-templates/read-by-external-id — 200 response
    • GET /v2/event-templates/{templateId} — 200 response
  • Enum documentMetadata › documentType: added KNOWLEDGE_BASE in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › group › metadata › documents › documentMetadata › documentType)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › group › metadata › documents › documentMetadata › documentType)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › group › metadata › documents › documentMetadata › documentType)
  • Enum paymentSourceAttributes › allowedThirdPartySources: added HILTON in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
  • Added property paymentSourceAttributes › supplierPaymentTypes in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
  • Enum rateCodeOverrides › supplier: added HILTON in the following APIs:
    • POST /v2/event-templates — request (path: tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/event-templates/{templateId}/edit-basic-info — request (path: tripOverrides › rateCodeOverrides › supplier)
  • Enum unusedCreditInfo › source: added HILTON in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)

User Management

  • Added property includeApiUsers in POST /v3/users/list — request
  • Enum secondaryServiceProviderTmcs › supplier: added HILTON in the following APIs:
    • POST /v2/users — request (path: personalInfo › emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)
    • GET and PUT /v2/users/{userId} — request and 200 response (path: personalInfo › emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)
    • GET and PUT /v2/users/{userId}/personal-info — request and 200 response (path: emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)

New endpoints

User Management

  • GET /v2/support-config

September 01, 2026

DocumentEventPolicyTemplateUser ManagementUpdatesNew endpoints

Updates

Document

  • Enum documentMetadata › documentType: added KNOWLEDGE_BASE in the following APIs:
    • GET and POST /v2/documents — request and 200 response (path: documents › documentMetadata › documentType)
    • GET /v2/documents/{documentId} — 200 response (path: document › documentMetadata › documentType)

Event

  • airlineName is no longer required in the following APIs:
    • POST /v2/events/list — 200 response
    • GET /v2/events/payment-sources — 200 response
    • GET /v2/events/read-by-external-id — 200 response
    • GET /v2/events/{eventId} — 200 response
  • Enum documentMetadata › documentType: added KNOWLEDGE_BASE in the following APIs:
    • POST /v2/events — request (path: documents › documentMetadata › documentType)
    • POST /v2/events/bulk-edit — request (path: eventsToUpdate › eventBasicInfo › documents › documentMetadata › documentType)
    • POST /v2/events/list — 200 response (path: events › group › metadata › documents › documentMetadata › documentType)
    • GET /v2/events/read-by-external-id — 200 response (path: event › group › metadata › documents › documentMetadata › documentType)
    • POST /v2/events/summaries — 200 response (path: tripEventSummaries › travelerEventSummary › documents › documentMetadata › documentType)
    • GET /v2/events/{eventId} — 200 response (path: event › group › metadata › documents › documentMetadata › documentType)
    • POST /v2/events/{eventId}/edit-basic-info — request (path: documents › documentMetadata › documentType)
  • Enum paymentSourceAttributes › allowedThirdPartySources: added HILTON in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
  • Added property paymentSourceAttributes › supplierPaymentTypes in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
  • Enum rateCodeOverrides › supplier: added HILTON in the following APIs:
    • POST /v2/events — request (path: tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/events/bulk-edit — request (path: eventsToUpdate › eventBasicInfo › tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/events/list — 200 response (path: events › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/events/read-by-external-id — 200 response (path: event › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/events/{eventId} — 200 response (path: event › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/events/{eventId}/edit-basic-info — request (path: tripOverrides › rateCodeOverrides › supplier)
  • Enum secondaryServiceProviderTmcs › supplier: added HILTON in POST /v2/events — request (path: newTraveler › personalInfo › emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)
  • Enum unusedCreditInfo › source: added HILTON in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)

Policy

  • Enum notAllowedConditions › blockedThirdPartySources: added HILTON in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: rules › policyValue › universalProps › airAncillaryProps › ancillaryWithConditions › notAllowedConditions › blockedThirdPartySources)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: rules › policyValue › universalProps › airAncillaryProps › ancillaryWithConditions › notAllowedConditions › blockedThirdPartySources)

Template

  • airlineName is no longer required in the following APIs:
    • POST /v2/event-templates/list — 200 response
    • GET /v2/event-templates/read-by-external-id — 200 response
    • GET /v2/event-templates/{templateId} — 200 response
  • Enum documentMetadata › documentType: added KNOWLEDGE_BASE in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › group › metadata › documents › documentMetadata › documentType)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › group › metadata › documents › documentMetadata › documentType)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › group › metadata › documents › documentMetadata › documentType)
  • Enum paymentSourceAttributes › allowedThirdPartySources: added HILTON in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
  • Added property paymentSourceAttributes › supplierPaymentTypes in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › mapping › paymentSourceAttributes › supplierPaymentTypes)
  • Enum rateCodeOverrides › supplier: added HILTON in the following APIs:
    • POST /v2/event-templates — request (path: tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/event-templates/{templateId}/edit-basic-info — request (path: tripOverrides › rateCodeOverrides › supplier)
  • Enum unusedCreditInfo › source: added HILTON in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)

User Management

  • Added property includeApiUsers in POST /v3/users/list — request
  • Enum secondaryServiceProviderTmcs › supplier: added HILTON in the following APIs:
    • POST /v2/users — request (path: personalInfo › emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)
    • GET and PUT /v2/users/{userId} — request and 200 response (path: personalInfo › emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)
    • GET and PUT /v2/users/{userId}/personal-info — request and 200 response (path: emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)

New endpoints

User Management

  • GET /v2/support-config

August 25, 2026

Access ManagementEventPolicyTemplateUser ManagementUpdatesDeprecations

Updates

Access Management

  • Added property filters › permissions in the following APIs:
    • POST /v3/companies/{companyId}/user-groups/list — request
    • POST /v3/users/{userId}/user-groups — request

Event

  • Enum paymentSourceAttributes › allowedThirdPartySources: added AMADEUS_NDC in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
  • Enum rateCodeOverrides › supplier: added AMADEUS_NDC in the following APIs:
    • POST /v2/events — request (path: tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/events/bulk-edit — request (path: eventsToUpdate › eventBasicInfo › tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/events/list — 200 response (path: events › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/events/read-by-external-id — 200 response (path: event › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/events/{eventId} — 200 response (path: event › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/events/{eventId}/edit-basic-info — request (path: tripOverrides › rateCodeOverrides › supplier)
  • Enum secondaryServiceProviderTmcs › supplier: added AMADEUS_NDC in POST /v2/events — request (path: newTraveler › personalInfo › emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)
  • Enum unusedCreditInfo › source: added AMADEUS_NDC in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)

Policy

  • Added property airPolicyRules › flightTicketsChangeable in the following APIs:
    • POST /v2/companies/{companyId}/policies — request
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response
  • Added property airPolicyRules › flightTicketsRefundable in the following APIs:
    • POST /v2/companies/{companyId}/policies — request
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response
  • Updated flightTicketsChangeable › description in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: airPolicyRules › flightTicketsChangeable › description)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: airPolicyRules › flightTicketsChangeable › description)
  • Added property flightTicketsChangeableProps › maxChangeFee in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: airPolicyRules › flightTicketsChangeable › flightTicketsChangeableProps › maxChangeFee)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: airPolicyRules › flightTicketsChangeable › flightTicketsChangeableProps › maxChangeFee)
  • Added property flightTicketsChangeableProps › types in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: airPolicyRules › flightTicketsChangeable › flightTicketsChangeableProps › types)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: airPolicyRules › flightTicketsChangeable › flightTicketsChangeableProps › types)
  • Added property flightTicketsRefundableProps › maxCancellationFee in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: airPolicyRules › flightTicketsRefundable › flightTicketsRefundableProps › maxCancellationFee)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: airPolicyRules › flightTicketsRefundable › flightTicketsRefundableProps › maxCancellationFee)
  • Added property flightTicketsRefundableProps › types in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: airPolicyRules › flightTicketsRefundable › flightTicketsRefundableProps › types)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: airPolicyRules › flightTicketsRefundable › flightTicketsRefundableProps › types)
  • Enum notAllowedConditions › blockedThirdPartySources: added AMADEUS_NDC in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: rules › policyValue › universalProps › airAncillaryProps › ancillaryWithConditions › notAllowedConditions › blockedThirdPartySources)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: rules › policyValue › universalProps › airAncillaryProps › ancillaryWithConditions › notAllowedConditions › blockedThirdPartySources)

Template

  • Enum paymentSourceAttributes › allowedThirdPartySources: added AMADEUS_NDC in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › mapping › paymentSourceAttributes › allowedThirdPartySources)
  • Enum rateCodeOverrides › supplier: added AMADEUS_NDC in the following APIs:
    • POST /v2/event-templates — request (path: tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › group › metadata › tripOverrides › rateCodeOverrides › supplier)
    • POST /v2/event-templates/{templateId}/edit-basic-info — request (path: tripOverrides › rateCodeOverrides › supplier)
  • Enum unusedCreditInfo › source: added AMADEUS_NDC in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › source)

User Management

  • Enum secondaryServiceProviderTmcs › supplier: added AMADEUS_NDC in the following APIs:
    • POST /v2/users — request (path: personalInfo › emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)
    • GET and PUT /v2/users/{userId} — request and 200 response (path: personalInfo › emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)
    • GET and PUT /v2/users/{userId}/personal-info — request and 200 response (path: emergencyContactInfo › userOrgId › tmcInfo › secondaryServiceProviderTmcs › supplier)

Deprecations

Policy

  • Deprecated flightTicketsChangeableProps › type in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: airPolicyRules › flightTicketsChangeable › flightTicketsChangeableProps › type)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: airPolicyRules › flightTicketsChangeable › flightTicketsChangeableProps › type)
  • Deprecated flightTicketsRefundableProps › type in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: airPolicyRules › flightTicketsRefundable › flightTicketsRefundableProps › type)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: airPolicyRules › flightTicketsRefundable › flightTicketsRefundableProps › type)

August 18, 2026

EventPolicyTemplateUpdatesDeprecations

Updates

Event

  • oneOfairlineProgram › airlineProgramMetadata: added a new object variant in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)

Policy

  • oneOfpolicyValue › universalProps: added a new object variant in the following APIs:
    • POST /v2/companies/{companyId}/policies — request (path: rules › policyValue › universalProps)
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response (path: rules › policyValue › universalProps)
  • Enum rules › ruleType: added AIR_ANCILLARY in the following APIs:
    • POST /v2/companies/{companyId}/policies — request
    • GET and PUT /v2/companies/{companyId}/policies/{policyId} — request and 200 response

Template

  • oneOfairlineProgram › airlineProgramMetadata: added a new object variant in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)

Deprecations

Event

  • Deprecated airlineProgram › airlineProgramMetadata in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)

Template

  • Deprecated airlineProgram › airlineProgramMetadata in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › vendorProgramPaymentDescriptor › vendorProgramPaymentMetadata › airlineProgram › airlineProgramMetadata)

August 13, 2026

EventTemplateUpdates

Updates

Event

  • Added property virtualPaymentMetadata › provider in the following APIs:
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider)

Template

  • Added property virtualPaymentMetadata › provider in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › customPaymentMethodDescriptor › virtualPaymentMetadata › provider)

August 10, 2026

User ManagementNew endpoints

New endpoints

User Management

  • GET /v2/users/{userId}/marriott-bonvoy-member-data

August 05, 2026

EventTemplateUser ManagementUpdates

Updates

Event

  • Removed property family1 › x-pii in the following APIs:
    • POST /v2/events — requestappears at:
      • newTraveler › personalInfo › emergencyContactInfo › name › family1 › x-pii
      • newTraveler › personalInfo › name › family1 › x-pii
      • newTraveler › personalInfo › travelerName › family1 › x-pii
      • newTraveler › travelArrangers › travelArrangers › name › family1 › x-pii
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family1 › x-pii)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family1 › x-pii)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family1 › x-pii)
    • POST /v2/events/summaries — 200 response (path: tripEventSummaries › travelerEventSummary › contactInfoList › name › family1 › x-pii)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family1 › x-pii)
  • Removed property family2 › x-pii in the following APIs:
    • POST /v2/events — requestappears at:
      • newTraveler › personalInfo › emergencyContactInfo › name › family2 › x-pii
      • newTraveler › personalInfo › name › family2 › x-pii
      • newTraveler › personalInfo › travelerName › family2 › x-pii
      • newTraveler › travelArrangers › travelArrangers › name › family2 › x-pii
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family2 › x-pii)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family2 › x-pii)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family2 › x-pii)
    • POST /v2/events/summaries — 200 response (path: tripEventSummaries › travelerEventSummary › contactInfoList › name › family2 › x-pii)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family2 › x-pii)
  • Removed property given › x-pii in the following APIs:
    • POST /v2/events — requestappears at:
      • newTraveler › personalInfo › emergencyContactInfo › name › given › x-pii
      • newTraveler › personalInfo › name › given › x-pii
      • newTraveler › personalInfo › travelerName › given › x-pii
      • newTraveler › travelArrangers › travelArrangers › name › given › x-pii
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › given › x-pii)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › given › x-pii)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › given › x-pii)
    • POST /v2/events/summaries — 200 response (path: tripEventSummaries › travelerEventSummary › contactInfoList › name › given › x-pii)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › given › x-pii)
  • Removed property middle › x-pii in the following APIs:
    • POST /v2/events — requestappears at:
      • newTraveler › personalInfo › emergencyContactInfo › name › middle › x-pii
      • newTraveler › personalInfo › name › middle › x-pii
      • newTraveler › personalInfo › travelerName › middle › x-pii
      • newTraveler › travelArrangers › travelArrangers › name › middle › x-pii
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › middle › x-pii)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › middle › x-pii)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › middle › x-pii)
    • POST /v2/events/summaries — 200 response (path: tripEventSummaries › travelerEventSummary › contactInfoList › name › middle › x-pii)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › middle › x-pii)
  • Removed property preferred › x-pii in the following APIs:
    • POST /v2/events — requestappears at:
      • newTraveler › personalInfo › emergencyContactInfo › name › preferred › x-pii
      • newTraveler › personalInfo › name › preferred › x-pii
      • newTraveler › personalInfo › travelerName › preferred › x-pii
      • newTraveler › travelArrangers › travelArrangers › name › preferred › x-pii
    • POST /v2/events/list — 200 response (path: events › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › preferred › x-pii)
    • GET /v2/events/payment-sources — 200 response (path: paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › preferred › x-pii)
    • GET /v2/events/read-by-external-id — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › preferred › x-pii)
    • POST /v2/events/summaries — 200 response (path: tripEventSummaries › travelerEventSummary › contactInfoList › name › preferred › x-pii)
    • GET /v2/events/{eventId} — 200 response (path: event › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › preferred › x-pii)

Template

  • Removed property family1 › x-pii in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family1 › x-pii)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family1 › x-pii)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family1 › x-pii)
  • Removed property family2 › x-pii in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family2 › x-pii)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family2 › x-pii)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › family2 › x-pii)
  • Removed property given › x-pii in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › given › x-pii)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › given › x-pii)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › given › x-pii)
  • Removed property middle › x-pii in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › middle › x-pii)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › middle › x-pii)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › middle › x-pii)
  • Removed property preferred › x-pii in the following APIs:
    • POST /v2/event-templates/list — 200 response (path: eventTemplates › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › preferred › x-pii)
    • GET /v2/event-templates/read-by-external-id — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › preferred › x-pii)
    • GET /v2/event-templates/{templateId} — 200 response (path: eventTemplate › paymentSources › paymentSource › unusedCreditDescriptor › unusedCreditInfo › passengerName › preferred › x-pii)

User Management

  • Removed property family1 › x-pii in the following APIs:
    • POST /v2/users — requestappears at:
      • personalInfo › emergencyContactInfo › name › family1 › x-pii
      • personalInfo › name › family1 › x-pii
      • personalInfo › travelerName › family1 › x-pii
      • travelArrangers › travelArrangers › name › family1 › x-pii
    • GET and PUT /v2/users/{userId} — request and 200 responseappears at:
      • personalInfo › emergencyContactInfo › name › family1 › x-pii
      • personalInfo › name › family1 › x-pii
      • personalInfo › travelerName › family1 › x-pii
      • travelArrangers › travelArrangers › name › family1 › x-pii
    • GET and PUT /v2/users/{userId}/personal-info — request and 200 responseappears at:
      • emergencyContactInfo › name › family1 › x-pii
      • name › family1 › x-pii
      • travelerName › family1 › x-pii
    • GET /v2/users/{userId}/travel-arrangers — 200 response (path: travelArrangers › name › family1 › x-pii)
    • POST /v3/users/list — 200 response (path: users › personalDetail › name › family1 › x-pii)
  • Removed property family2 › x-pii in the following APIs:
    • POST /v2/users — requestappears at:
      • personalInfo › emergencyContactInfo › name › family2 › x-pii
      • personalInfo › name › family2 › x-pii
      • personalInfo › travelerName › family2 › x-pii
      • travelArrangers › travelArrangers › name › family2 › x-pii
    • GET and PUT /v2/users/{userId} — request and 200 responseappears at:
      • personalInfo › emergencyContactInfo › name › family2 › x-pii
      • personalInfo › name › family2 › x-pii
      • personalInfo › travelerName › family2 › x-pii
      • travelArrangers › travelArrangers › name › family2 › x-pii
    • GET and PUT /v2/users/{userId}/personal-info — request and 200 responseappears at:
      • emergencyContactInfo › name › family2 › x-pii
      • name › family2 › x-pii
      • travelerName › family2 › x-pii
    • GET /v2/users/{userId}/travel-arrangers — 200 response (path: travelArrangers › name › family2 › x-pii)
    • POST /v3/users/list — 200 response (path: users › personalDetail › name › family2 › x-pii)
  • Removed property given › x-pii in the following APIs:
    • POST /v2/users — requestappears at:
      • personalInfo › emergencyContactInfo › name › given › x-pii
      • personalInfo › name › given › x-pii
      • personalInfo › travelerName › given › x-pii
      • travelArrangers › travelArrangers › name › given › x-pii
    • GET and PUT /v2/users/{userId} — request and 200 responseappears at:
      • personalInfo › emergencyContactInfo › name › given › x-pii
      • personalInfo › name › given › x-pii
      • personalInfo › travelerName › given › x-pii
      • travelArrangers › travelArrangers › name › given › x-pii
    • GET and PUT /v2/users/{userId}/personal-info — request and 200 responseappears at:
      • emergencyContactInfo › name › given › x-pii
      • name › given › x-pii
      • travelerName › given › x-pii
    • GET /v2/users/{userId}/travel-arrangers — 200 response (path: travelArrangers › name › given › x-pii)
    • POST /v3/users/list — 200 response (path: users › personalDetail › name › given › x-pii)
  • Removed property middle › x-pii in the following APIs:
    • POST /v2/users — requestappears at:
      • personalInfo › emergencyContactInfo › name › middle › x-pii
      • personalInfo › name › middle › x-pii
      • personalInfo › travelerName › middle › x-pii
      • travelArrangers › travelArrangers › name › middle › x-pii
    • GET and PUT /v2/users/{userId} — request and 200 responseappears at:
      • personalInfo › emergencyContactInfo › name › middle › x-pii
      • personalInfo › name › middle › x-pii
      • personalInfo › travelerName › middle › x-pii
      • travelArrangers › travelArrangers › name › middle › x-pii
    • GET and PUT /v2/users/{userId}/personal-info — request and 200 responseappears at:
      • emergencyContactInfo › name › middle › x-pii
      • name › middle › x-pii
      • travelerName › middle › x-pii
    • GET /v2/users/{userId}/travel-arrangers — 200 response (path: travelArrangers › name › middle › x-pii)
    • POST /v3/users/list — 200 response (path: users › personalDetail › name › middle › x-pii)
  • Removed property preferred › x-pii in the following APIs:
    • POST /v2/users — requestappears at:
      • personalInfo › emergencyContactInfo › name › preferred › x-pii
      • personalInfo › name › preferred › x-pii
      • personalInfo › travelerName › preferred › x-pii
      • travelArrangers › travelArrangers › name › preferred › x-pii
    • GET and PUT /v2/users/{userId} — request and 200 responseappears at:
      • personalInfo › emergencyContactInfo › name › preferred › x-pii
      • personalInfo › name › preferred › x-pii
      • personalInfo › travelerName › preferred › x-pii
      • travelArrangers › travelArrangers › name › preferred › x-pii
    • GET and PUT /v2/users/{userId}/personal-info — request and 200 responseappears at:
      • emergencyContactInfo › name › preferred › x-pii
      • name › preferred › x-pii
      • travelerName › preferred › x-pii
    • GET /v2/users/{userId}/travel-arrangers — 200 response (path: travelArrangers › name › preferred › x-pii)
    • POST /v3/users/list — 200 response (path: users › personalDetail › name › preferred › x-pii)

Release timeline

Webhook changelog

Copyright © 2026 Spotnana Technology, Inc.