GetMyHotels Devices API
The devices API from GetMyHotels — 2 operation(s) for devices.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/getmyhotels-com:getmyhotels-com-devices-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: GetMyHotels REST Devices API
version: 1.0.0
description: REST surface for the native GetMyHotels apps. Every route is a thin transport over the shared tRPC routers — inputs are validated with the same Zod schemas the web client uses, and responses are returned verbatim. Authentication uses Better Auth bearer session tokens issued by the /api/auth/* endpoints (not part of this spec). Native clients send X-GMH-App-Version and X-GMH-Platform on every request; versions below the configured floor receive a typed 426 UpgradeRequiredError.
servers:
- url: https://api.getmyhotels.com
description: Production API
tags:
- name: Devices
paths:
/v1/devices:
post:
tags:
- Devices
summary: Register this device for push notifications
description: 'Runs `push.register`. Idempotent per token — the app calls this on every launch, which is what keeps `lastSeenAt` meaningful. A bearer token is honored but NOT required, and sending one is what claims a guest''s device row into their account: the row is upserted on the token, so the first launch after signing in re-points an existing guest registration at the user. There is no separate claim call.
`platform` selects the push service and, with it, how `token` is validated. It defaults to `ios` for the clients that shipped before it existed.
**iOS (APNs).** Send the token as lowercase hex with no separators — `Data.description` prints ``, which is not that, and a non-hex token is rejected here rather than becoming a row that can never receive a push. `environment` picks the APNs host and the two are not interchangeable. `bundleId` is the APNs topic, stored per device so an extension cannot inherit the app''s.
**Android (FCM).** Send the registration token exactly as `FirebaseMessaging.getToken()` returned it — base64url with a colon, longer than an APNs token and never hex. `environment` is always `production`: FCM has one endpoint and one credential for every build. `bundleId` is the applicationId (`com.gmh.mobile`, or `com.gmh.mobile.dev` for a debug build); FCM routes on the token alone, so it is a record of which build registered rather than an address.'
security:
- bearerAuth: []
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
token:
type: string
minLength: 32
maxLength: 255
platform:
type: string
enum:
- ios
- android
default: ios
environment:
type: string
enum:
- production
- development
default: production
bundleId:
type: string
minLength: 1
maxLength: 128
locale:
type:
- string
- 'null'
minLength: 2
maxLength: 16
default: null
dataAlerts:
type: boolean
default: false
required:
- token
- bundleId
responses:
'200':
description: Success
content:
application/json:
schema:
description: Verbatim JSON output of the `push.register` tRPC procedure. Response shapes are intentionally not modeled in this spec; the native client types them by hand.
'400':
description: Request validation failed or the router rejected the input
content:
application/json:
schema:
$ref: '#/components/schemas/ApiError'
'426':
description: Reported X-GMH-App-Version is below the supported minimum — the app must update
content:
application/json:
schema:
$ref: '#/components/schemas/UpgradeRequiredError'
'500':
description: Unexpected server error (opaque; details stay in logs)
content:
application/json:
schema:
$ref: '#/components/schemas/ApiError'
operationId: postV1Devices
x-operation-id-source: derived
delete:
tags:
- Devices
summary: Retire every push token for the signed-in account
description: Runs `push.unregisterAll`. Called on sign-out. Protected — "all of mine" needs an owner to mean anything — and enforced by the procedure rather than by the path list, since `POST /v1/devices` on the same path must stay guest-reachable.
security:
- bearerAuth: []
responses:
'200':
description: Success
content:
application/json:
schema:
description: Verbatim JSON output of the `push.unregisterAll` tRPC procedure. Response shapes are intentionally not modeled in this spec; the native client types them by hand.
'400':
description: Request validation failed or the router rejected the input
content:
application/json:
schema:
$ref: '#/components/schemas/ApiError'
'401':
description: Missing or invalid bearer session token
content:
application/json:
schema:
$ref: '#/components/schemas/ApiError'
'426':
description: Reported X-GMH-App-Version is below the supported minimum — the app must update
content:
application/json:
schema:
$ref: '#/components/schemas/UpgradeRequiredError'
'500':
description: Unexpected server error (opaque; details stay in logs)
content:
application/json:
schema:
$ref: '#/components/schemas/ApiError'
operationId: deleteV1Devices
x-operation-id-source: derived
/v1/devices/{token}:
delete:
tags:
- Devices
summary: Retire one device push token
description: Runs `push.unregister`. Called when the customer withdraws notification permission or the token rotates. Public for the same reason registration is — a guest device that registered without a session must be able to retire itself. Takes either an APNs or an FCM token; the row is found by the token alone, so the caller does not repeat its platform.
parameters:
- schema:
type: string
minLength: 1
maxLength: 255
required: true
name: token
in: path
responses:
'200':
description: Success
content:
application/json:
schema:
description: Verbatim JSON output of the `push.unregister` tRPC procedure. Response shapes are intentionally not modeled in this spec; the native client types them by hand.
'400':
description: Request validation failed or the router rejected the input
content:
application/json:
schema:
$ref: '#/components/schemas/ApiError'
'426':
description: Reported X-GMH-App-Version is below the supported minimum — the app must update
content:
application/json:
schema:
$ref: '#/components/schemas/UpgradeRequiredError'
'500':
description: Unexpected server error (opaque; details stay in logs)
content:
application/json:
schema:
$ref: '#/components/schemas/ApiError'
operationId: deleteV1DevicesByToken
x-operation-id-source: derived
components:
schemas:
UpgradeRequiredError:
type: object
properties:
error:
type: object
properties:
code:
type: string
enum:
- UPGRADE_REQUIRED
message:
type: string
minVersion:
type: string
example: 1.2.0
platform:
type:
- string
- 'null'
required:
- code
- message
- minVersion
- platform
required:
- error
ApiError:
type: object
properties:
error:
type: object
properties:
code:
type: string
example: NOT_FOUND
message:
type: string
example: Booking not found
domainCode:
type: string
example: NON_REFUNDABLE_CONSENT_REQUIRED
issues:
type: array
items:
type: object
properties:
path:
type: string
message:
type: string
required:
- path
- message
required:
- code
- message
required:
- error
securitySchemes:
bearerAuth:
type: http
scheme: bearer
description: 'Better Auth session token. Obtain it from the native /api/auth/* endpoints (Better Auth bearer plugin — out of scope for this spec, see #922).'
x-provenance:
method: harvested
publisher: GetMyHotels
source: https://api.getmyhotels.com/v1/openapi.json
note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
stamped by stamp-openapi-provenance.py (roadmap#793)