Hotelumo Daily rates API

openapi: 3.2.0
info:
  title: Hotelumo Daily rates API
  version: 1.0.0
  description: 'Public REST API for Hotelumo. Authenticate with an API key created in the Hotelumo dashboard: send the base64-encoded key secret with HTTP Basic auth. Each key carries per-resource scopes like `reservations:read` or `rates:write`.'
servers:
- url: https://api.hotelumo.com
tags:
- name: Daily rates
paths:
  /api/dailyRates:
    get:
      tags:
      - Daily rates
      summary: List daily rates
      description: Reads per-day prices/inventory for a rate plan over a date window (the ARI surface). Pass `hotelId`, `ratePlanId`, `dateFrom` and `dateTo`. Requires the `rates:read` scope.
      security:
      - apiKey: []
      - accessToken: []
      parameters:
      - in: query
        name: hotelId
        required: true
        schema:
          type: string
      - in: query
        name: ratePlanId
        required: true
        schema:
          type: string
      - in: query
        name: dateFrom
        required: true
        schema:
          type: string
          example: '2026-05-01'
      - in: query
        name: dateTo
        required: true
        schema:
          type: string
          example: '2026-05-31'
      responses:
        '200':
          description: Array of daily rates
        '403':
          description: API key is missing the `rates:read` scope
      operationId: getApiDailyRates
      x-codeSamples:
      - lang: Node + Request
        source: "const request = require('request');\n\nconst options = {\n  method: 'GET',\n  url: 'https://api.hotelumo.com/api/dailyRates',\n  qs: {\n    hotelId: 'SOME_STRING_VALUE',\n    ratePlanId: 'SOME_STRING_VALUE',\n    dateFrom: '2026-05-01',\n    dateTo: '2026-05-31'\n  },\n  headers: {Authorization: 'Basic REPLACE_BASIC_AUTH'}\n};\n\nrequest(options, function (error, response, body) {\n  if (error) throw new Error(error);\n\n  console.log(body);\n});\n"
      - lang: Shell + Curl
        source: "curl --request GET \\\n  --url 'https://api.hotelumo.com/api/dailyRates?hotelId=SOME_STRING_VALUE&ratePlanId=SOME_STRING_VALUE&dateFrom=2026-05-01&dateTo=2026-05-31' \\\n  --header 'Authorization: Basic REPLACE_BASIC_AUTH'"
      - lang: Shell + Httpie
        source: "http GET 'https://api.hotelumo.com/api/dailyRates?hotelId=SOME_STRING_VALUE&ratePlanId=SOME_STRING_VALUE&dateFrom=2026-05-01&dateTo=2026-05-31' \\\n  Authorization:'Basic REPLACE_BASIC_AUTH'"
      - lang: Python + Python3
        source: 'import http.client


          conn = http.client.HTTPSConnection("api.hotelumo.com")


          headers = { ''Authorization'': "Basic REPLACE_BASIC_AUTH" }


          conn.request("GET", "/api/dailyRates?hotelId=SOME_STRING_VALUE&ratePlanId=SOME_STRING_VALUE&dateFrom=2026-05-01&dateTo=2026-05-31", headers=headers)


          res = conn.getresponse()

          data = res.read()


          print(data.decode("utf-8"))'
      - lang: Php + Curl
        source: "<?php\n\n$curl = curl_init();\n\ncurl_setopt_array($curl, [\n  CURLOPT_URL => \"https://api.hotelumo.com/api/dailyRates?hotelId=SOME_STRING_VALUE&ratePlanId=SOME_STRING_VALUE&dateFrom=2026-05-01&dateTo=2026-05-31\",\n  CURLOPT_RETURNTRANSFER => true,\n  CURLOPT_ENCODING => \"\",\n  CURLOPT_MAXREDIRS => 10,\n  CURLOPT_TIMEOUT => 30,\n  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,\n  CURLOPT_CUSTOMREQUEST => \"GET\",\n  CURLOPT_HTTPHEADER => [\n    \"Authorization: Basic REPLACE_BASIC_AUTH\"\n  ],\n]);\n\n$response = curl_exec($curl);\n$err = curl_error($curl);\n\ncurl_close($curl);\n\nif ($err) {\n  echo \"cURL Error #:\" . $err;\n} else {\n  echo $response;\n}"
      - lang: Php + Http1
        source: "<?php\n\n$request = new HttpRequest();\n$request->setUrl('https://api.hotelumo.com/api/dailyRates');\n$request->setMethod(HTTP_METH_GET);\n\n$request->setQueryData([\n  'hotelId' => 'SOME_STRING_VALUE',\n  'ratePlanId' => 'SOME_STRING_VALUE',\n  'dateFrom' => '2026-05-01',\n  'dateTo' => '2026-05-31'\n]);\n\n$request->setHeaders([\n  'Authorization' => 'Basic REPLACE_BASIC_AUTH'\n]);\n\ntry {\n  $response = $request->send();\n\n  echo $response->getBody();\n} catch (HttpException $ex) {\n  echo $ex;\n}"
      - lang: Php + Http2
        source: "<?php\n\n$client = new http\\Client;\n$request = new http\\Client\\Request;\n\n$request->setRequestUrl('https://api.hotelumo.com/api/dailyRates');\n$request->setRequestMethod('GET');\n$request->setQuery(new http\\QueryString([\n  'hotelId' => 'SOME_STRING_VALUE',\n  'ratePlanId' => 'SOME_STRING_VALUE',\n  'dateFrom' => '2026-05-01',\n  'dateTo' => '2026-05-31'\n]));\n\n$request->setHeaders([\n  'Authorization' => 'Basic REPLACE_BASIC_AUTH'\n]);\n\n$client->enqueue($request)->send();\n$response = $client->getResponse();\n\necho $response->getBody();"
    post:
      tags:
      - Daily rates
      summary: Upsert daily rates
      description: Batch-upserts per-day prices/inventory (max 500 per call). Requires the `rates:write` scope.
      security:
      - apiKey: []
      - accessToken: []
      responses:
        '200':
          description: The upserted daily rates
        '403':
          description: API key is missing the `rates:write` scope
      operationId: postApiDailyRates
      x-codeSamples:
      - lang: Node + Request
        source: "const request = require('request');\n\nconst options = {\n  method: 'POST',\n  url: 'https://api.hotelumo.com/api/dailyRates',\n  headers: {Authorization: 'Basic REPLACE_BASIC_AUTH'}\n};\n\nrequest(options, function (error, response, body) {\n  if (error) throw new Error(error);\n\n  console.log(body);\n});\n"
      - lang: Shell + Curl
        source: "curl --request POST \\\n  --url https://api.hotelumo.com/api/dailyRates \\\n  --header 'Authorization: Basic REPLACE_BASIC_AUTH'"
      - lang: Shell + Httpie
        source: "http POST https://api.hotelumo.com/api/dailyRates \\\n  Authorization:'Basic REPLACE_BASIC_AUTH'"
      - lang: Python + Python3
        source: 'import http.client


          conn = http.client.HTTPSConnection("api.hotelumo.com")


          headers = { ''Authorization'': "Basic REPLACE_BASIC_AUTH" }


          conn.request("POST", "/api/dailyRates", headers=headers)


          res = conn.getresponse()

          data = res.read()


          print(data.decode("utf-8"))'
      - lang: Php + Curl
        source: "<?php\n\n$curl = curl_init();\n\ncurl_setopt_array($curl, [\n  CURLOPT_URL => \"https://api.hotelumo.com/api/dailyRates\",\n  CURLOPT_RETURNTRANSFER => true,\n  CURLOPT_ENCODING => \"\",\n  CURLOPT_MAXREDIRS => 10,\n  CURLOPT_TIMEOUT => 30,\n  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,\n  CURLOPT_CUSTOMREQUEST => \"POST\",\n  CURLOPT_HTTPHEADER => [\n    \"Authorization: Basic REPLACE_BASIC_AUTH\"\n  ],\n]);\n\n$response = curl_exec($curl);\n$err = curl_error($curl);\n\ncurl_close($curl);\n\nif ($err) {\n  echo \"cURL Error #:\" . $err;\n} else {\n  echo $response;\n}"
      - lang: Php + Http1
        source: "<?php\n\n$request = new HttpRequest();\n$request->setUrl('https://api.hotelumo.com/api/dailyRates');\n$request->setMethod(HTTP_METH_POST);\n\n$request->setHeaders([\n  'Authorization' => 'Basic REPLACE_BASIC_AUTH'\n]);\n\ntry {\n  $response = $request->send();\n\n  echo $response->getBody();\n} catch (HttpException $ex) {\n  echo $ex;\n}"
      - lang: Php + Http2
        source: "<?php\n\n$client = new http\\Client;\n$request = new http\\Client\\Request;\n\n$request->setRequestUrl('https://api.hotelumo.com/api/dailyRates');\n$request->setRequestMethod('POST');\n$request->setHeaders([\n  'Authorization' => 'Basic REPLACE_BASIC_AUTH'\n]);\n\n$client->enqueue($request)->send();\n$response = $client->getResponse();\n\necho $response->getBody();"
components:
  securitySchemes:
    apiKey:
      type: http
      scheme: basic
      description: 'HTTP Basic auth carrying only the API key secret: `Authorization: Basic base64(<key secret>)`.'
    accessToken:
      type: apiKey
      in: header
      name: Authorization
      description: 'Operator session token issued by the Hotelumo dashboard: `Authorization: Token <access token>`.'