API and webhooks

Which permissions an API key can get, what happens without a permission, how long it is valid for, and how you rotate or renew it.

How to recognize blocks in the data API (kind), filter, create and remove them, where they are passed on, and why Pending is not suitable for this.

Read and write daily prices and minimum stay through /api/v1/rates, the rules around PriceLabs and fetching the availability calendar for your website.

Where you create API keys, who is allowed to do so, how permissions and validity work, where you find unit IDs, and where the documentation is located.

Set up webhooks in Xentra: all events, field groups, HMAC signature, trial, logs, resending, automatic deactivation, and bot handovers to Slack.

How to connect an AI assistant like Claude or ChatGPT to your Xentra account, what it can read and change, and how to disconnect it.

Create and modify direct bookings via the Data API: available fields, why some are null, check-in and guest guide links, and PMS forwarding.

Read and send guest messages via the API: Subscription, write permission, no placeholders, 10 per minute, and the webhook for new messages.

How many requests an API key may make, why it responds with 403 or 429, and how you stay in sync without constant polling.

What the email about a new API key contains and how you immediately lock a key you do not recognize via the link.

Add add-ons such as EV charging, minibar, or parking to a booking via the Xentra API or MCP and issue the invoice for the stay.