> ## Documentation Index
> Fetch the complete documentation index at: https://api-docs.kychospitality.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get API info

> Returns the API version and basic context, and confirms your key works.
Authenticated — use this as a quick "am I hitting the right endpoint with a valid key" check.




## OpenAPI

````yaml get /
openapi: 3.1.0
info:
  title: KYC Hospitality Public API
  version: 1.0.0
  summary: Public REST API for hotel tech partners.
  description: >
    The KYC Hospitality public API for hotel technology partners.


    Key conventions (full detail in the design docs):

    - **Brand is the host/subdomain**; the path is brand-agnostic and identical
    across brands.

    - **Property scope** via the `Kyc-Property-Id` header — required on
    property-scoped resources,
      omitted on brand-wide ones (e.g. guests).
    - **Auth**: `Authorization: Bearer <key>` (prefixed `kyc_live_` /
    `kyc_test_`).

    - **Success** responses use a `{ data, meta }` envelope; every resource
    carries an `object` discriminator.

    - **Errors** are RFC 9457 `application/problem+json`, enriched with a stable
    machine `code`.

    - **Casing**: `camelCase` for all fields/params/variables; `kebab-case` for
    URL path segments.

    - **Strict** input validation; **lenient** output contract (clients must
    ignore unknown fields).
  contact:
    name: KYC API Support
    email: api-support@kychospitality.com
    url: https://docs.kychospitality.com
  license:
    name: Proprietary — © KYC Hospitality
  termsOfService: https://docs.kychospitality.com/terms
servers:
  - url: https://{service}.{brand}.kych.co/v1
    description: Production. Brand is the host; the path is brand-agnostic.
    variables:
      service:
        default: public-api
        description: API service label (not yet finalized — `public-api` or `api`).
      brand:
        default: hilton
        description: Brand subdomain, e.g. `hilton`.
security:
  - bearerAuth: []
tags:
  - name: System
    description: Utility endpoints for API information and health checks.
  - name: Properties
    description: >-
      Hotel properties within the brand. Discovery endpoints — scoped by the API
      key, not the property header.
paths:
  /:
    get:
      tags:
        - System
      summary: Get API info
      description: >
        Returns the API version and basic context, and confirms your key works.

        Authenticated — use this as a quick "am I hitting the right endpoint
        with a valid key" check.
      operationId: getApiInfo
      parameters:
        - $ref: '#/components/parameters/UserAgent'
        - $ref: '#/components/parameters/CorrelationId'
        - $ref: '#/components/parameters/Traceparent'
      responses:
        '200':
          description: API information.
          headers:
            Kyc-Request-Id:
              $ref: '#/components/headers/KycRequestId'
            Kyc-Correlation-Id:
              $ref: '#/components/headers/KycCorrelationId'
          content:
            application/json:
              schema:
                type: object
                required:
                  - data
                  - meta
                properties:
                  data:
                    $ref: '#/components/schemas/ApiInfo'
                  meta:
                    $ref: '#/components/schemas/Meta'
              examples:
                ok:
                  value:
                    data:
                      object: api_info
                      apiVersion: v1
                      documentationUrl: https://docs.kychospitality.com
                    meta:
                      requestId: req_01J9Z3K8Q2X7C5N0
                      timestamp: '2026-06-25T22:01:01.010Z'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '406':
          $ref: '#/components/responses/NotAcceptable'
        '429':
          $ref: '#/components/responses/TooManyRequests'
        '500':
          $ref: '#/components/responses/InternalError'
        '503':
          $ref: '#/components/responses/ServiceUnavailable'
components:
  parameters:
    UserAgent:
      name: User-Agent
      in: header
      required: true
      description: Identifies the calling application. 3–255 printable ASCII characters.
      schema:
        type: string
        minLength: 3
        maxLength: 255
        pattern: ^[\x20-\x7E]+$
      example: AcmePMS/2.3 (+https://acme.example.com)
    CorrelationId:
      name: Kyc-Correlation-Id
      in: header
      required: false
      description: >
        Optional caller-supplied opaque ID for log correlation. Echoed back and
        logged.

        Treated opaquely (never decoded). Must match the pattern below.
      schema:
        type: string
        pattern: ^[A-Za-z0-9._=+/-]{1,128}$
      example: 6f1c2a9e-4d3b-4c8a-9e2f-7b1a0d5c3e21
    Traceparent:
      name: traceparent
      in: header
      required: false
      description: >
        Optional W3C Trace Context header for distributed tracing. A malformed
        value is ignored

        and a fresh trace is started (per the W3C spec) — it never causes a 4xx.
      schema:
        type: string
      example: 00-4bf92f3577b34da6a3ce929d0e0e4736-00f067aa0ba902b7-01
  headers:
    KycRequestId:
      description: >-
        Server-generated request ID. Present on every response. Mirrors
        `meta.requestId`.
      schema:
        type: string
      example: req_01J9Z3K8Q2X7C5N0
    KycCorrelationId:
      description: >-
        Echo of the caller's `Kyc-Correlation-Id`, present only when one was
        sent.
      schema:
        type: string
    RetryAfter:
      description: Seconds to wait before retrying. Sent on 429 and 503.
      schema:
        type: integer
        minimum: 0
      example: 30
    RateLimitLimit:
      description: >-
        Request quota for the window. (Documented now; enforcement later —
        Decision 13.)
      schema:
        type: integer
    RateLimitRemaining:
      description: Requests remaining in the current window.
      schema:
        type: integer
    RateLimitReset:
      description: Seconds until the quota resets.
      schema:
        type: integer
  schemas:
    ApiInfo:
      type: object
      description: Response body for the API info endpoint.
      required:
        - object
        - apiVersion
        - documentationUrl
      properties:
        object:
          type: string
          const: api_info
          description: Resource type discriminator.
        apiVersion:
          type: string
          description: The live API version, matching the URL version segment.
          examples:
            - v1
        documentationUrl:
          type: string
          format: uri
          description: Base URL of the public documentation site.
          examples:
            - https://docs.kychospitality.com
    Meta:
      type: object
      description: Metadata present on every success response.
      required:
        - requestId
        - timestamp
      properties:
        requestId:
          type: string
          description: >-
            Server-generated ID for this request (mirrors the `Kyc-Request-Id`
            header).
          examples:
            - req_01J9Z3K8Q2X7C5N0
        timestamp:
          type: string
          format: date-time
          description: UTC timestamp, ISO 8601 with milliseconds.
          examples:
            - '2026-06-25T22:01:01.010Z'
        pagination:
          $ref: '#/components/schemas/Pagination'
          description: Present only on list responses.
    Pagination:
      type: object
      description: Offset/page pagination metadata (Decision 11).
      required:
        - page
        - perPage
        - total
      properties:
        page:
          type: integer
          minimum: 1
          description: Current page number (1-based).
        perPage:
          type: integer
          minimum: 1
          description: Items per page.
        total:
          type: integer
          minimum: 0
          description: Total items across all pages.
    ProblemDetails:
      type: object
      description: >
        RFC 9457 problem+json, enriched. **Every field is always present** —
        empty scalars are `""`,

        empty arrays are `[]`. Clients branch on `code`, never on
        `title`/`detail` text.
      required:
        - type
        - title
        - status
        - detail
        - moreInfo
        - instance
        - code
        - errors
        - requestId
        - timestamp
      properties:
        type:
          type: string
          format: uri
          description: >-
            URL to the docs page for this error code (this IS the documentation
            reference).
          examples:
            - https://docs.kychospitality.com/errors/guest-not-found
        title:
          type: string
          description: Short, human-readable summary of the error class (stable).
        status:
          type: integer
          description: HTTP status code, repeated for convenience.
          examples:
            - 404
        detail:
          type: string
          description: >-
            Human-readable detail specific to this occurrence. May change; do
            not parse.
        moreInfo:
          type: string
          description: >-
            Optional inline troubleshooting tips beyond `detail`. `""` when
            none.
        instance:
          type: string
          description: Path of the request that produced the error.
          examples:
            - /v1/guests/9c8e1f20-1a2b-3c4d-5e6f-708192a3b4c5
        code:
          type: string
          description: Stable, machine-readable error code. Clients branch on this.
          examples:
            - GUEST_NOT_FOUND
        errors:
          type: array
          description: Field-level problems (populated for 422 validation; `[]` otherwise).
          items:
            $ref: '#/components/schemas/FieldError'
        requestId:
          type: string
          description: Server request ID (mirrors the `Kyc-Request-Id` header).
        timestamp:
          type: string
          format: date-time
          description: UTC timestamp of the error.
    FieldError:
      type: object
      description: One field-level validation problem inside `ProblemDetails.errors`.
      required:
        - field
        - code
        - detail
      properties:
        field:
          type: string
          description: Dotted/array path to the offending field.
          examples:
            - email
            - phones[0].number
        code:
          type: string
          description: Stable field-error code.
          examples:
            - INVALID_FORMAT
            - INVALID_ENUM_VALUE
            - REQUIRED
            - OUT_OF_RANGE
        detail:
          type: string
          description: Human-readable explanation for this field.
  responses:
    Unauthorized:
      description: Authentication failed (missing/invalid/expired/unknown key).
      headers:
        Kyc-Request-Id:
          $ref: '#/components/headers/KycRequestId'
        WWW-Authenticate:
          description: Authentication scheme.
          schema:
            type: string
          example: Bearer
      content:
        application/problem+json:
          schema:
            $ref: '#/components/schemas/ProblemDetails'
          examples:
            missingAuth:
              value:
                type: https://docs.kychospitality.com/errors/missing-auth-header
                title: Missing Authorization header
                status: 401
                detail: >-
                  No Authorization header was provided. Send 'Authorization:
                  Bearer <key>'.
                moreInfo: ''
                instance: /v1/
                code: MISSING_AUTH_HEADER
                errors: []
                requestId: req_01J9Z3K8Q2X7C5N0
                timestamp: '2026-06-25T22:01:01.010Z'
    Forbidden:
      description: >-
        Authenticated, but not allowed (brand/property access, scope,
        suspended).
      headers:
        Kyc-Request-Id:
          $ref: '#/components/headers/KycRequestId'
      content:
        application/problem+json:
          schema:
            $ref: '#/components/schemas/ProblemDetails'
          examples:
            propertyAccessDenied:
              value:
                type: https://docs.kychospitality.com/errors/property-access-denied
                title: Property access denied
                status: 403
                detail: Your key is not authorized for the requested property.
                moreInfo: ''
                instance: /v1/rooms/1b2c3d4e-0000-0000-0000-000000000000
                code: PROPERTY_ACCESS_DENIED
                errors: []
                requestId: req_01J9Z3K8Q2X7C5N0
                timestamp: '2026-06-25T22:01:01.010Z'
    NotAcceptable:
      description: The requested representation (Accept header) cannot be produced.
      headers:
        Kyc-Request-Id:
          $ref: '#/components/headers/KycRequestId'
      content:
        application/problem+json:
          schema:
            $ref: '#/components/schemas/ProblemDetails'
          examples:
            notAcceptable:
              value:
                type: https://docs.kychospitality.com/errors/not-acceptable
                title: Not acceptable
                status: 406
                detail: >-
                  This endpoint only produces application/json. Requested Accept
                  could not be satisfied.
                moreInfo: ''
                instance: /v1/properties
                code: NOT_ACCEPTABLE
                errors: []
                requestId: req_01J9Z3K8Q2X7C5N0
                timestamp: '2026-06-25T22:01:01.010Z'
    TooManyRequests:
      description: Rate limit exceeded.
      headers:
        Kyc-Request-Id:
          $ref: '#/components/headers/KycRequestId'
        Retry-After:
          $ref: '#/components/headers/RetryAfter'
        RateLimit-Limit:
          $ref: '#/components/headers/RateLimitLimit'
        RateLimit-Remaining:
          $ref: '#/components/headers/RateLimitRemaining'
        RateLimit-Reset:
          $ref: '#/components/headers/RateLimitReset'
      content:
        application/problem+json:
          schema:
            $ref: '#/components/schemas/ProblemDetails'
          examples:
            rateLimited:
              value:
                type: https://docs.kychospitality.com/errors/rate-limited
                title: Too many requests
                status: 429
                detail: Rate limit exceeded. Retry after 30 seconds.
                moreInfo: ''
                instance: /v1/guests
                code: RATE_LIMITED
                errors: []
                requestId: req_01J9Z3K8Q2X7C5N0
                timestamp: '2026-06-25T22:01:01.010Z'
    InternalError:
      description: >
        Unexpected server fault. No internals are leaked; quote the requestId to
        support.

        **Body is best-effort:** this `problem+json` is produced only when the
        application's exception

        handler is reached. A true crash, or an infra-level failure (e.g. AWS
        ALB returning 502/504

        before the request reaches the app), bypasses this handler — callers
        MUST tolerate a non-JSON

        5xx response and not assume this shape on any 5xx.
      headers:
        Kyc-Request-Id:
          $ref: '#/components/headers/KycRequestId'
      content:
        application/problem+json:
          schema:
            $ref: '#/components/schemas/ProblemDetails'
          examples:
            internal:
              value:
                type: https://docs.kychospitality.com/errors/internal-error
                title: Internal server error
                status: 500
                detail: >-
                  An unexpected error occurred. Contact support with the
                  requestId.
                moreInfo: ''
                instance: /v1/guests
                code: INTERNAL_ERROR
                errors: []
                requestId: req_01J9Z3K8Q2X7C5N0
                timestamp: '2026-06-25T22:01:01.010Z'
    ServiceUnavailable:
      description: Temporarily unavailable (maintenance/overload). Retry per Retry-After.
      headers:
        Kyc-Request-Id:
          $ref: '#/components/headers/KycRequestId'
        Retry-After:
          $ref: '#/components/headers/RetryAfter'
      content:
        application/problem+json:
          schema:
            $ref: '#/components/schemas/ProblemDetails'
          examples:
            unavailable:
              value:
                type: https://docs.kychospitality.com/errors/service-unavailable
                title: Service unavailable
                status: 503
                detail: >-
                  The service is temporarily unavailable. Retry after 30
                  seconds.
                moreInfo: ''
                instance: /v1/properties
                code: SERVICE_UNAVAILABLE
                errors: []
                requestId: req_01J9Z3K8Q2X7C5N0
                timestamp: '2026-06-25T22:01:01.010Z'
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: >
        API key sent as a bearer token: `Authorization: Bearer kyc_live_...`.

        Keys are prefixed `kyc_live_` (production) or `kyc_test_` (test mode).

        OAuth2 access tokens (also `Bearer`) may be supported later — the header
        never changes.

````