Tablezio API
Build with the same API that runs Tablezio.
A REST API for restaurant operations. Manage orders, menus, reservations, inventory, customers, loyalty, and analytics. Receive real-time signed webhooks for every lifecycle change.
How it works
Every Tablezio account ships with API access. You create an API key from the dashboard, sign requests with the X-API-Key header, and you're talking to the same backend that powers our web and mobile apps.
The API is REST over HTTPS. Resources return JSON with snake_case keys, prefixed IDs (ord_, mi_, rsv_, …), and Unix timestamps. List endpoints use cursor pagination. Mutations support idempotency keys. Webhooks are signed with HMAC-SHA256.
A 30-second tour
Authenticate and list the most recent orders:
curl
curl https://api.tablezio.com/v1/orders \
-H 'X-API-Key: tbz_…' \
-G --data-urlencode 'limit=3'You'll get back a Stripe-style list envelope:
200 OK · application/json
{
"object": "list",
"data": [
{ "id": "ord_507f1f77bcf86cd799439011", "object": "order", "type": "dine_in", "status": "completed", "total": 4290, "currency": "usd", "created": 1716657600 },
{ "id": "ord_5a1b2c3d4e5f6a7b8c9d0e1f", "object": "order", "type": "takeout", "status": "preparing", "total": 1850, "currency": "usd", "created": 1716657480 },
{ "id": "ord_6b2c3d4e5f6a7b8c9d0e1f20", "object": "order", "type": "delivery", "status": "placed", "total": 3120, "currency": "usd", "created": 1716657300 }
],
"has_more": true,
"next_cursor": "v1:6b2c3d4e5f6a7b8c9d0e1f20:1716657300000",
"previous_cursor": null,
"url": "/v1/orders"
}Design principles
- Predictable. Every resource has the same envelope: id, object, created, updated, plus its own fields.
- Versioned. We never break /v1. Additive changes are safe; breaking changes go to a new major version.
- Stripe-compatible idioms. Cursor pagination, expansion, idempotency keys, signed webhooks — the same patterns your team already knows.
- Sandbox built in. Mark an API key as sandbox to run end-to-end tests without touching production data.
Where to next?
- Quickstart — Create an order in three calls.
- Authentication — API keys, scopes, sandbox vs. live.
- Webhooks — Listen for order, reservation, and inventory events.
- API reference — Every endpoint with parameters and examples.