Saltar al contenido

Tablezio API

Build with the same API that runs Tablezio.

A REST API for restaurant operations. Manage orders, menus, reservations, inventory, customers, loyalty, and analytics. Receive real-time signed webhooks for every lifecycle change.

How it works

Every Tablezio account ships with API access. You create an API key from the dashboard, sign requests with the X-API-Key header, and you're talking to the same backend that powers our web and mobile apps.

The API is REST over HTTPS. Resources return JSON with snake_case keys, prefixed IDs (ord_, mi_, rsv_, …), and Unix timestamps. List endpoints use cursor pagination. Mutations support idempotency keys. Webhooks are signed with HMAC-SHA256.

A 30-second tour

Authenticate and list the most recent orders:

curl
curl https://api.tablezio.com/v1/orders \
  -H 'X-API-Key: tbz_…' \
  -G --data-urlencode 'limit=3'

You'll get back a Stripe-style list envelope:

200 OK · application/json
{
  "object": "list",
  "data": [
    { "id": "ord_507f1f77bcf86cd799439011", "object": "order", "type": "dine_in", "status": "completed", "total": 4290, "currency": "usd", "created": 1716657600 },
    { "id": "ord_5a1b2c3d4e5f6a7b8c9d0e1f", "object": "order", "type": "takeout",  "status": "preparing", "total": 1850, "currency": "usd", "created": 1716657480 },
    { "id": "ord_6b2c3d4e5f6a7b8c9d0e1f20", "object": "order", "type": "delivery", "status": "placed",    "total": 3120, "currency": "usd", "created": 1716657300 }
  ],
  "has_more": true,
  "next_cursor": "v1:6b2c3d4e5f6a7b8c9d0e1f20:1716657300000",
  "previous_cursor": null,
  "url": "/v1/orders"
}

Design principles

  • Predictable. Every resource has the same envelope: id, object, created, updated, plus its own fields.
  • Versioned. We never break /v1. Additive changes are safe; breaking changes go to a new major version.
  • Stripe-compatible idioms. Cursor pagination, expansion, idempotency keys, signed webhooks — the same patterns your team already knows.
  • Sandbox built in. Mark an API key as sandbox to run end-to-end tests without touching production data.

Where to next?

  • Quickstart — Create an order in three calls.
  • Authentication — API keys, scopes, sandbox vs. live.
  • Webhooks — Listen for order, reservation, and inventory events.
  • API reference — Every endpoint with parameters and examples.