Okidooki API

A REST API for partners to read the public nightlife catalog and manage their own venues, events and promotions programmatically.

Introduction

Two developer products live here. Agent APIs (APP v0): one signed REST protocol that lets your software (an AI agent or any backend) buy on behalf of your users from three networks: Okidooki Night (nightlife), NowTrust (security) and MakeItFun (merch). Business API (below): REST for venues and organizers to manage their own catalog, events and promotions on Okidooki.

Agent APIs (APP v0)

Same protocol on every network: POST {gateway}/a2a/v0/{route}, JSON body, Authorization: Bearer <key> + X-Timestamp + X-Signature (HMAC-SHA256 over timestamp.rawBody), Idempotency-Key on order. Flow: discover → quote (firm 30 min) → order → status; the user links their account once (Connect with Okidooki) and sets limits (mandate) your calls must respect. Every network also speaks Google A2A and MCP.

Portal (keys, sandbox users, webhooks, usage, billing) · Quickstart · Full API reference (every route per network, generated from the spec) · OpenAPI · Postman · SDK JavaScript / Python · conformance test · network registry · status. Pricing: test and sandbox free; live traffic 2,000 calls/month free, then CHF 0.01 per call and CHF 0.50 per paid order.

Okidooki Night API

Venues (table reservations, free entry with a reservation at partner venues) and events (tickets) across cities; the user confirms and pays in the Okidooki app. Gateway https://europe-west1-okidooki-nightlife.cloudfunctions.net/a2aGateway, A2A okidooki.app/.well-known/agent.json, MCP okidooki.app/mcp.

NowTrust API

Licensed private security in Switzerland: guards and company teams for events, nightclubs, bodyguard, property and escort; SOS dispatch of the nearest guards; spending mandates so bookings can settle without a tap. Gateway https://nowtrust.app (card /a2a/v0/card), A2A nowtrust.app/.well-known/agent.json (RPC /a2a/v0/rpc), MCP nowtrust.app/mcp.

MakeItFun API

Print-on-demand merch (Printful): t-shirts, hoodies, caps, mugs, posters, bags, patches and more, designed by AI, from an image, from exact text, or from the Design Curator's looks; mockups, firm quotes with real shipping, orders paid by the user in MakeItFun (30 minutes), crew orders with per-person sizes. Gateway https://europe-west1-make-it-fun-app.cloudfunctions.net/a2aGateway, A2A make-it-fun-app.web.app/.well-known/agent.json, MCP make-it-fun-app.web.app/mcp.

Webhooks (order.status, sos.status, connect.approved, link.revoked) replace polling on every network; set them in the portal. Full request/response fields for all routes above: API reference.

Business API (Okidooki venues and organizers)

The Okidooki API is organised around REST. It has predictable resource-oriented URLs, accepts JSON request bodies, returns JSON responses and uses standard HTTP verbs and status codes. Every response object carries an object field naming its type.

There are two families of endpoints:

• Catalog (read): public upcoming events and venues across every city, for discovery and listings.
• Your data (read and write): the venues you own, their events, promotions and live analytics. Scoped strictly to the account that owns the key.

Authentication

Authenticate every request with your secret API key in the Authorization header. Keys carry the account and the scopes they are allowed to use. Never expose a live key in client-side code, a mobile app or a public repository.

# All requests use a Bearer key
curl https://okidooki.app/v1/ping \
  -H "Authorization: Bearer ok_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

API keys

Create and revoke keys in the Okidooki app under Business → Developers. A key is shown in full exactly once, at creation. We store only a hash, so if you lose it you must create a new one.

Scopes

Each key holds a set of scopes. A request to an endpoint whose scope the key lacks returns 403 permission_error.

Pricing & limits

Plans are billed monthly in EUR. Each plan includes a monthly call quota and a per-minute burst limit. Paid plans keep serving past the included quota and bill the excess as overage; the Free plan is a hard cap. Every response includes the rate-limit headers below, and a blocked request does not consume quota.

Manage your plan and API keys in the Okidooki web app.

Errors

Okidooki uses conventional HTTP status codes. Errors return a JSON body with an error object.

{
  "error": {
    "type": "invalid_request_error",
    "code": "invalid_dates",
    "message": "'end_date' must be after 'start_date'."
  }
}

Pagination

List endpoints return an object with object: "list", a data array, a has_more boolean and a next_cursor. To fetch the next page, pass next_cursor back as the cursor query parameter. Treat the cursor as opaque. limit ranges from 1 to 100 (default 20).

curl "https://okidooki.app/v1/events?limit=20&cursor=eyJvIjoyMH0" \
  -H "Authorization: Bearer ok_live_..."

List events

Returns upcoming public events (those whose end_date is in the future), soonest first.

{
  "object": "list",
  "data": [
    {
      "object": "event",
      "id": "7Qd2...",
      "title": "Saturday Mainroom",
      "type": "CLUB",
      "venue_id": "vnu_123",
      "venue_name": "Club Aurora",
      "city_id": "basel",
      "start_date": "2026-10-10T22:00:00.000Z",
      "end_date": "2026-10-11T05:00:00.000Z",
      "image_url": "https://...",
      "has_tickets": true,
      "latitude": 47.5596,
      "longitude": 7.5886
    }
  ],
  "has_more": true,
  "next_cursor": "MTc2..."
}

Get an event

Retrieve a single event by id.

List venues

Returns venues, optionally filtered by cityId. Sensitive owner fields (legal name, registration number, verification documents) are never exposed.

Get a venue

List your events

Lists every event you organise (newest first), including hidden and past ones.

Create an event

Create an event. Provide a location either by referencing a venue you own (venue_id) or by supplying a free-text venue_name with latitude and longitude.

curl https://okidooki.app/v1/me/events \
  -H "Authorization: Bearer ok_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "title": "Friday Techno",
    "venue_id": "vnu_123",
    "type": "CLUB",
    "start_date": "2026-10-17T22:00:00Z",
    "end_date": "2026-10-18T05:00:00Z",
    "genres": ["techno","house"]
  }'

Update an event

Update your own event. Patchable: title, description, start_date, end_date, image_url, genres, external_ticket_url, show_on_map, type.

Delete an event

Permanently delete an event you own. Events with sold tickets cannot be deleted through the API.

List your venues

Update a venue

Update a venue you own. Patchable: name, description, phone, website, email, socials, opening_hours, cuisines, amenities, venue_type, currency, accepts_food_orders, reservations_enabled, banner_url, logo_url, address.

List promotions

Optional query venueId narrows to one venue.

Create a promotion

Update a promotion

Patchable: title, description, limit, ends_at, and status (only to ENDED, to close a promotion early).

Venue analytics

Live, computed metrics for a venue you own.

{
  "object": "analytics",
  "venue_id": "vnu_123",
  "live_check_ins": 42,
  "oki_rating": 4.6,
  "events": { "total": 31, "upcoming": 4, "tickets_sold": 860 },
  "reservations": { "total": 120, "by_status": { "CONFIRMED": 90 } },
  "orders": { "drinks": { "total": 540 }, "food": { "total": 120 } },
  "promotions": { "total": 6, "active": 2, "claimed_total": 148 }
}