Base URL

Canonical API host: https://api.fly-and-drive.com/v1

OpenAPI spec: api.fly-and-drive.com/openapi

Postman

Import via OpenAPI link or download the curated collection with sandbox environment and test scripts.

• OpenAPI (Import → Link): api.fly-and-drive.com/openapi.json
• Collection: api.fly-and-drive.com/postman/collection.json
• Sandbox environment: api.fly-and-drive.com/postman/environment/sandbox.json

Set environment variable apiKey to your test key, then run Discovery → Search → Create booking → Get booking.

Authentication

Header Authorization: Bearer fd_connect_test_... or fd_connect_live_...

Rate limit: 10 requests per second per Connect partner.

Search: GET /search/drive

Scope: search:drive. Query: airport, from, to

GET https://api.fly-and-drive.com/v1/search/drive?airport=SFO&from=2026-09-01&to=2026-09-08

Booking: POST /bookings

JSON body: offerId, airportIata, pickupDate, returnDate, customer

Status: GET /bookings/:id

Returns booking status and voucherToken when confirmed.

Voucher: GET /bookings/:id/voucher

Scope: voucher. PDF once confirmed.

GET https://api.fly-and-drive.com/v1/bookings/{bookingId}/voucher

Security: IP allowlist

Optionally restrict each API key to specific server egress IPs or CIDR ranges. Empty = allow all. Applies to server-side Connect v1 routes only — not the browser widget config endpoint.

Denied requests return HTTP 403 with a clientIp field to help debug misconfigured allowlists.

Webhooks

Events: booking.created, booking.confirmed, booking.rejected, booking.cancelled

Verify payloads with the Fly-Drive-Signature HMAC header.