API Reference

Internal API documentation for Simpli. Base URL: https://livesimpli.app

All mutating endpoints require Origin header validation (CSRF). Authenticated routes use Supabase JWT cookie.

SimpliFly — Flights

Search cash fares and award availability.

GET/api/fly/searchauth optional

Search flights

Returns cash fares (Amadeus) and award availability. Authenticated users track against daily quota. Streams NDJSON chunks.

Parameters

Name	Type	Req.	Description
origin	string (IATA)	✓	3-letter departure airport code
destination	string (IATA)	✓	3-letter arrival airport code
departDate	YYYY-MM-DD	✓	Outbound departure date
returnDate	YYYY-MM-DD		Return date (round trip only)
adults	integer 1–9		Number of adult passengers (default 1)
cabin	economy\|premium_economy\|business\|first		Cabin class (default economy)

Responses

200Streaming NDJSON: chunks of { type: 'result', data: NormalizedSearchResult[] } | { type: 'done' } | { type: 'error', message: string }

400Invalid query params (Zod validation error)

429{ "error": "rate_limit", "remaining": 0, "resetAt": "<ISO>" }

GET/api/fly/price-predictionauth optional

Get price prediction

Parameters

Name	Type	Req.	Description
origin	string (IATA)	✓	Departure airport
destination	string (IATA)	✓	Arrival airport
departDate	YYYY-MM-DD	✓	Travel date

Responses

200{ signal: "low"|"typical"|"high", percentile: number, recommendation: string }

400Invalid params

SimpliStay — Hotels

Search hotels, get weather, and autocomplete destinations.

GET/api/stay/searchauth optional

Search hotels

Parameters

Name	Type	Req.	Description
destination	string	✓	City or area (min 2 chars)
checkIn	YYYY-MM-DD	✓	Check-in date
checkOut	YYYY-MM-DD	✓	Check-out date
adults	integer 1–9		Adults (default 1)
rooms	integer 1–5		Rooms (default 1)

Responses

200Streaming NDJSON: { type: 'properties', data: NormalizedProperty[] } | { type: 'meta', lat, lon, destination } | { type: 'done' }

400Validation error

429Rate limit exceeded

GET/api/stay/autocompletepublic

Destination autocomplete

Parameters

Name	Type	Req.	Description
q	string	✓	Partial destination query (min 2 chars)

Responses

200{ suggestions: string[] }

GET/api/stay/weatherpublic

Get weather forecast

Parameters

Name	Type	Req.	Description
lat	number	✓	Latitude
lon	number	✓	Longitude
checkIn	YYYY-MM-DD	✓	Check-in date
checkOut	YYYY-MM-DD	✓	Check-out date

Responses

200{ days: WeatherDay[] } — up to 16 days via Open-Meteo

SimpliPoints

User loyalty point balance management.

GET/api/pointsauth required

Get all balances

Responses

200Array of { program, balance, source, synced_at, updated_at }

POST/api/pointsauth required

Upsert a balance

Request body

{ "program": "chase_ur", "balance": 75000 }

Responses

200Updated row

400Validation error

Auth

Authentication helpers.

GET/auth/callbackpublic

Auth callback

Supabase OAuth/magic-link callback. Validates x-forwarded-host to prevent open redirect. Redirects to / on success or /login on error.

Responses

302Redirect to / (success) or /login?error=... (failure)

400Invalid or missing code