Skip to main content
PUT
cURL

Authorizations

Authorization
string
header
required

A short-lived partner token, obtained by exchanging your API key at POST /token. Send it as Authorization: Bearer <access_token>.

Tokens live for fifteen minutes by default and never for more than an hour. Mint one per batch of work, not one per request.

The token carries the workspace and the environment its key was issued for. You cannot change either by asking: the exchange ignores everything in the request body for exactly that reason.

Never send it as a cookie or in a query string, and never store it — store the API key, mint tokens from it.

Path Parameters

external_uid
string
required

Your own identifier for the block, typically your reservation id. Unique to you.

Required string length: 1 - 255

Body

application/json

A range of nights that are unavailable. Send exactly one of provider_id or listing_id.

No guest data of any kind is accepted here — an unrecognised field is an error, not something we quietly ignore.

provider_id
string
required

Your own property identifier.

Required string length: 1 - 128
check_in
string<date>
required

First night held.

Example:

"2026-09-01"

check_out
string<date>
required

Departure day, exclusive. The night before this is the last one held.

Example:

"2026-09-05"

listing_id
string<uuid>

Maat's listing identifier, for a property you did not push.

reason
enum<string>

A closed set, deliberately. There is no free-text alternative, because the obvious thing to write in one is a guest's name.

Available options:
reserved,
maintenance,
owner_stay,
other

Response

The nights are held.

external_uid
string
required
result
enum<string>
required
Available options:
created,
updated
nights
integer
required

Nights actually held, restated so you can check it.

Required range: 1 <= x <= 730
listing_id
string<uuid>
required

The Maat listing the block landed on. Useful when you addressed the property by your own identifier and want ours in return.