B2B INTEGRATION

Partner API

Allows nightclubs, 5-star hotels, wedding planners and other partners to offer AUREARGENT services to their clientele directly from their own booking interface.

Authentication

Each partner receives an API key pk_live_xxx generated from the AUREARGENT admin. The key is sent via the HTTP header:

Authorization: Bearer pk_live_xxx

All requests are audited (IP, body, status, duration) on the AUREARGENT side.

Supported partner types

  • nightclub — nightclubs (Twiga, Jimmy'z, etc.)
  • hotel — 5-star hotels (concierge desk)
  • wedding_planner — wedding planners / wedding agencies
  • yacht_charter — yacht charter companies
  • jet_broker — private jet brokers
  • event_agency — event agencies
  • real_estate — luxury real estate agencies
  • spa_beauty — spas / beauty institutes
  • restaurant — fine dining restaurants
  • travel_agency — high-end travel agencies

Available services

  • chauffeur — private chauffeur transfer (instant price)
  • vehicle_rental — long-term chauffeur-driven vehicle rental (instant price)
  • photographer — photo shoot (quote on request)
  • villa_inquiry — villa booking (quote on request)
  • yacht_inquiry — yacht charter (quote on request)
  • jet_inquiry — private jet flight (quote on request)
  • event_package — complete event package (quote)
  • concierge_request — generic concierge request

Endpoints

1. POST /api/partners/v1/chauffeur-quote

Requests a quote. For chauffeur and vehicle_rental the price is returned instantly. For other services, the quote is marked on_demand and AUREARGENT responds within 2 business hours.

{
  "service_type": "chauffeur",
  "client_name": "John Doe",
  "client_phone": "+33600000000",
  "client_email": "[email protected]",
  "passengers": 2,
  "pickup_time": "2026-06-15T01:30:00Z",
  "pickup_location": "Twiga Monte-Carlo",
  "dropoff_location": "Hotel de Paris",
  "vehicle_class": "luxury",
  "external_ref": "TWG-12345",
  "notes": "VIP table — sortie carre or"
}

Response (chauffeur, instant price):

{
  "success": true,
  "quote_id": "uuid",
  "service_type": "chauffeur",
  "price": 120,
  "currency": "EUR",
  "on_demand": false,
  "expires_at": "2026-06-14T23:45:00Z"
}

Response (other services, on request):

{
  "success": true,
  "quote_id": "uuid",
  "service_type": "villa_inquiry",
  "price": null,
  "on_demand": true,
  "message": "Devis sur demande — AUREARGENT vous repond sous 2h ouvrees..."
}

2. POST /api/partners/v1/chauffeur-confirm

Confirms a quote. The mission is created and dispatched at AUREARGENT.

{ "quote_id": "uuid" }

The quote expires after 15 min for instant prices (24h for on-demand).

3. GET /api/partners/v1/bookings/:id

Polling to track the status: quoted → confirmed → dispatched → in_progress → completed.

4. POST /api/partners/v1/bookings/:id/cancel

{ "reason": "client annule" }

Security

  • API key hashed with bcrypt cost 12, constant-time comparison (anti-timing)
  • Rate limit of 60 requests / minute per key
  • Full audit log (IP, user-agent, request body, duration) in partner_api_logs
  • Strict HTTPS (TLS 1.3, HSTS preload)
  • All partner data under Postgres RLS (service_role only)
  • One-click key rotation from the AUREARGENT admin (immediately revokes the old one)

Sandbox / Testing

Contact [email protected] to obtain a sandbox key.