API Terms
API access is approved, scoped, and governed.
OSP APIs are for reviewed partners only. Token creation, production access, and booking-to-pass workflows require approval and audit controls.
Platform Gateway
Website outside. Mobile app inside.
The public website explains and routes the ecosystem. The traveler app handles pass, QR, trips, Passport Map, and mobile-first journey actions.
Partner API boundary
Partners may connect booking records into OSP workflows only through approved access. OSP remains the authority for pass and QR lifecycle. Partners may not create independent QR identities or bypass OSP status logic.