Saltar al contenido principal

Documentación Partner LosCenotes

This site documents the current Partner surface of LosCenotes API.

What is covered​

The partner ecosystem is split into two groups:

1. Partner-specific APIs​

These are the endpoints implemented in src/partners/controllers and exposed through the global /api prefix:

  • Public Partner API: /api/partner/*
  • Partner Registration: /api/partners/register*
  • Partner Portal: /api/partner-portal/*
  • Admin Partners: /api/admin/partners/*
  • Partner Settings: /api/partner-settings/*
  • Partner Users: /api/partners/users/*
  • Partner Reports: /api/partner-reports/*
  • Partner Reservations: /api/partner-reservations/*
  • Partner Webhooks: /api/partners/webhooks/*
  • Partner Sandbox: /api/partner-sandbox/* (live — schema aislado partners_sandbox; usa claves sk_test_ solo en estas rutas de tooling)
  • Webhook Simulator: /api/partner/webhooks/simulator/* (live — solo sk_test_; no para /api/partner/*)

2. Shared platform APIs used by partners​

Partners also consume shared endpoints outside src/partners, such as:

  • pricing calculation
  • checkout providers
  • payment methods
  • public discount rules and coupons
  • public cenote/service data

Those endpoints are documented here as shared platform APIs, not as part of the partner module itself.

Current verified scope​

  • 87 partner endpoints currently implemented in src/partners/controllers
  • global API prefix: /api
  • docs aligned to controller routes, not legacy naming

Start here​

Important notes​

  • All examples in this site use the real global prefix: /api
  • Prices exposed by the API are documented in cents unless stated otherwise
  • Some older internal docs still mention 83 or 89 endpoints; the current implementation exposes 87
  • Auth SSOT: X-API-Key → partner_api_keys (no x-api-secret); remint via regenerate only
  • Sandbox está live (schema partners_sandbox); las claves sk_test_ solo funcionan en /api/partner-sandbox/* y el webhook simulator — son rechazadas en /api/partner/* (sandbox_key_not_allowed_on_production_api)
  • El WebSocket realtime del partner está shipped (PartnerRealtimeGateway, path /partner/ws; JWT + API key key_hash) — ver Autenticación
  • Métricas: los request logs de la Public Partner API se ingestan en partner_api_logs; la UI del portal muestra esa serie (vacío → vacío)
  • Billing: la página de billing del portal está live pero es P2 parcial (no es billing comercial completo)
  • Support tickets: live create/list (partner_support_tickets); portal /partner/support. Cola de triaje Admin diferida
  • URLs de webhook: solo HTTPS público; privadas/metadata rechazadas; entrega saliente con maxRedirects: 0 + DNS fijado
  • Invite: membership pendiente + emailDelivery=pending_manual (sin email automático)
  • Comisión: el partner solo puede actualizar customRates[]; seller_profiles.commissionRate es solo admin

Need raw OpenAPI?​

  • Main API reference: /docs
  • Partner-filtered reference: /partner-docs

Updated: 2026-08-03 — harden de mutaciones partners (SSRF/DNS pin, invite pending_manual, commission admin-only, paridad WEB create) alineado con API edfcba9a.