curl --fail-with-body "https://maatstays.wtf/v1/properties?page=1&page_size=100" \
-H "Authorization: Bearer $MAAT_PARTNER_TOKEN"const headers = { Authorization: `Bearer ${process.env.MAAT_PARTNER_TOKEN}` };
for (let page = 1; ; page += 1) {
const url = new URL('https://maatstays.wtf/v1/properties');
url.searchParams.set('page', String(page));
url.searchParams.set('page_size', '100');
const res = await fetch(url, { headers });
const body = await res.json();
if (!res.ok) throw new Error(`${body.code}: ${body.detail}`);
for (const property of body.items) {
console.log(property.property_id, property.publishable, property.missing);
}
if (!body.has_more) break;
}
import os
import requests
headers = {"Authorization": f"Bearer {os.environ['MAAT_PARTNER_TOKEN']}"}
page = 1
while True:
res = requests.get(
"https://maatstays.wtf/v1/properties",
headers=headers,
params={"page": page, "page_size": 100},
timeout=30,
)
body = res.json()
if res.status_code >= 400:
raise RuntimeError(f"{body['code']}: {body.get('detail')}")
for property_ in body["items"]:
print(property_["property_id"], property_["publishable"])
if not body["has_more"]:
break
page += 1
package main
import (
"encoding/json"
"fmt"
"log"
"net/http"
"net/url"
"os"
"strconv"
)
type property struct {
PropertyID string `json:"property_id"`
Publishable bool `json:"publishable"`
Missing []string `json:"missing"`
}
type page struct {
Items []property `json:"items"`
HasMore bool `json:"has_more"`
}
func main() {
token := os.Getenv("MAAT_PARTNER_TOKEN")
for pageNum := 1; ; pageNum++ {
query := url.Values{}
query.Set("page", strconv.Itoa(pageNum))
query.Set("page_size", "100")
req, _ := http.NewRequest(http.MethodGet,
"https://maatstays.wtf/v1/properties?"+query.Encode(), nil)
req.Header.Set("Authorization", "Bearer "+token)
res, err := http.DefaultClient.Do(req)
if err != nil {
log.Fatal(err)
}
var body page
err = json.NewDecoder(res.Body).Decode(&body)
res.Body.Close()
if err != nil {
log.Fatal(err)
}
if res.StatusCode >= 400 {
log.Fatalf("list failed: %d", res.StatusCode)
}
for _, p := range body.Items {
fmt.Println(p.PropertyID, p.Publishable, p.Missing)
}
if !body.HasMore {
break
}
}
}
{
"items": [
{
"property_id": "3c9d1f42-7b60-4a18-9e55-0d2a6f8c31b7",
"provider_id": "my-prop-9001",
"property_type": "apartment",
"address": {
"line1": "14 Example Street",
"city": "Alexandria",
"region": "Alexandria",
"postal_code": "21500",
"country": "EG",
"latitude": 31.2001,
"longitude": 29.9187,
"building": "3",
"floor": "2",
"apartment": "12",
"directions": "Blue door on the courtyard side; the bell is on the left."
},
"timezone": "Africa/Cairo",
"amenities": [
"wifi",
"air-conditioning",
"washing-machine"
],
"units": [
{
"unit_id": "8e4b2a17-5c39-4d61-b0f2-7a9c3e51d804",
"unit_type": "apartment",
"max_guests": 4,
"bedrooms": 2,
"beds": 3,
"bathrooms": 1,
"check_in_time": "15:00",
"check_out_time": "12:00",
"amenities": [
"wifi",
"air-conditioning",
"washing-machine"
],
"house_rules": [
{
"slug": "pets_allowed",
"allowed": true
},
{
"slug": "smoking_allowed",
"allowed": false
}
],
"listings": [
{
"listing_id": "7c4b1e58-2a90-4f61-b3d2-5e8a1c0f7d24",
"inventory_kind": "unit",
"title": "Courtyard flat with the blue door",
"description": "A two-bedroom flat one street back from the corniche.",
"status": "listed",
"base_rate": {
"value": "1250.00",
"currency": "EGP"
},
"cleaning_fee": {
"value": "200.00",
"currency": "EGP"
},
"instant_booking": true,
"is_exclusive": false,
"is_best_price": true,
"rating": {
"average": 4.8,
"count": 24
},
"publishable": true,
"missing": [],
"console_url": "https://maatstays.wtf/properties/3c9d1f42-7b60-4a18-9e55-0d2a6f8c31b7"
}
]
}
],
"publishable": true,
"missing": [],
"created_at": "2026-08-30T18:42:11Z",
"updated_at": "2026-09-02T09:15:40Z",
"console_url": "https://maatstays.wtf/properties/3c9d1f42-7b60-4a18-9e55-0d2a6f8c31b7"
}
],
"has_more": false
}List your properties
One page of your workspace’s properties, newest first.
That is the whole workspace, including properties created in the Maat app that
have no provider_id at all.
Each entry carries its units and their listings, so a catalogue sync is one walk
rather than one call per property. publishable and missing say whether each
one satisfies the platform’s validity gate — a price above zero, at least one
amenity, a cover photo and a minimum photo count.
Paged with page and page_size; keep asking while has_more is true. There
is no total.
Live in a sandbox workspace. Returns 501 against a production one, where
nothing is read and nothing is disclosed.
curl --fail-with-body "https://maatstays.wtf/v1/properties?page=1&page_size=100" \
-H "Authorization: Bearer $MAAT_PARTNER_TOKEN"const headers = { Authorization: `Bearer ${process.env.MAAT_PARTNER_TOKEN}` };
for (let page = 1; ; page += 1) {
const url = new URL('https://maatstays.wtf/v1/properties');
url.searchParams.set('page', String(page));
url.searchParams.set('page_size', '100');
const res = await fetch(url, { headers });
const body = await res.json();
if (!res.ok) throw new Error(`${body.code}: ${body.detail}`);
for (const property of body.items) {
console.log(property.property_id, property.publishable, property.missing);
}
if (!body.has_more) break;
}
import os
import requests
headers = {"Authorization": f"Bearer {os.environ['MAAT_PARTNER_TOKEN']}"}
page = 1
while True:
res = requests.get(
"https://maatstays.wtf/v1/properties",
headers=headers,
params={"page": page, "page_size": 100},
timeout=30,
)
body = res.json()
if res.status_code >= 400:
raise RuntimeError(f"{body['code']}: {body.get('detail')}")
for property_ in body["items"]:
print(property_["property_id"], property_["publishable"])
if not body["has_more"]:
break
page += 1
package main
import (
"encoding/json"
"fmt"
"log"
"net/http"
"net/url"
"os"
"strconv"
)
type property struct {
PropertyID string `json:"property_id"`
Publishable bool `json:"publishable"`
Missing []string `json:"missing"`
}
type page struct {
Items []property `json:"items"`
HasMore bool `json:"has_more"`
}
func main() {
token := os.Getenv("MAAT_PARTNER_TOKEN")
for pageNum := 1; ; pageNum++ {
query := url.Values{}
query.Set("page", strconv.Itoa(pageNum))
query.Set("page_size", "100")
req, _ := http.NewRequest(http.MethodGet,
"https://maatstays.wtf/v1/properties?"+query.Encode(), nil)
req.Header.Set("Authorization", "Bearer "+token)
res, err := http.DefaultClient.Do(req)
if err != nil {
log.Fatal(err)
}
var body page
err = json.NewDecoder(res.Body).Decode(&body)
res.Body.Close()
if err != nil {
log.Fatal(err)
}
if res.StatusCode >= 400 {
log.Fatalf("list failed: %d", res.StatusCode)
}
for _, p := range body.Items {
fmt.Println(p.PropertyID, p.Publishable, p.Missing)
}
if !body.HasMore {
break
}
}
}
{
"items": [
{
"property_id": "3c9d1f42-7b60-4a18-9e55-0d2a6f8c31b7",
"provider_id": "my-prop-9001",
"property_type": "apartment",
"address": {
"line1": "14 Example Street",
"city": "Alexandria",
"region": "Alexandria",
"postal_code": "21500",
"country": "EG",
"latitude": 31.2001,
"longitude": 29.9187,
"building": "3",
"floor": "2",
"apartment": "12",
"directions": "Blue door on the courtyard side; the bell is on the left."
},
"timezone": "Africa/Cairo",
"amenities": [
"wifi",
"air-conditioning",
"washing-machine"
],
"units": [
{
"unit_id": "8e4b2a17-5c39-4d61-b0f2-7a9c3e51d804",
"unit_type": "apartment",
"max_guests": 4,
"bedrooms": 2,
"beds": 3,
"bathrooms": 1,
"check_in_time": "15:00",
"check_out_time": "12:00",
"amenities": [
"wifi",
"air-conditioning",
"washing-machine"
],
"house_rules": [
{
"slug": "pets_allowed",
"allowed": true
},
{
"slug": "smoking_allowed",
"allowed": false
}
],
"listings": [
{
"listing_id": "7c4b1e58-2a90-4f61-b3d2-5e8a1c0f7d24",
"inventory_kind": "unit",
"title": "Courtyard flat with the blue door",
"description": "A two-bedroom flat one street back from the corniche.",
"status": "listed",
"base_rate": {
"value": "1250.00",
"currency": "EGP"
},
"cleaning_fee": {
"value": "200.00",
"currency": "EGP"
},
"instant_booking": true,
"is_exclusive": false,
"is_best_price": true,
"rating": {
"average": 4.8,
"count": 24
},
"publishable": true,
"missing": [],
"console_url": "https://maatstays.wtf/properties/3c9d1f42-7b60-4a18-9e55-0d2a6f8c31b7"
}
]
}
],
"publishable": true,
"missing": [],
"created_at": "2026-08-30T18:42:11Z",
"updated_at": "2026-09-02T09:15:40Z",
"console_url": "https://maatstays.wtf/properties/3c9d1f42-7b60-4a18-9e55-0d2a6f8c31b7"
}
],
"has_more": false
}Authorizations
A short-lived partner token, obtained by exchanging your API key at
POST /token. Send it as Authorization: Bearer <access_token>.
Tokens live for fifteen minutes by default and never for more than an hour. Mint one per batch of work, not one per request.
The token carries the workspace and the environment its key was issued for. You cannot change either by asking: the exchange ignores everything in the request body for exactly that reason.
It also carries the key's scopes (scope, a list). Every operation names a
scope as x-maat-scope, and a token whose key lacks it is refused with
403 insufficient_scope, naming the scope. Scopes are fixed when a key is
issued and are re-read from the key on every request, so a key narrowed today is
narrowed on its next call — the token's scope is what the key held at exchange
time, for your own reading, never what authorizes a request.
x-maat-scope is the floor, and on the quick-action operations it is not the
whole requirement. PUT and DELETE /listings/{listing_id}/quick-actions/{template_key}
carry rules:write, and additionally require pricing:write when
template_key begins pricing. — the capability depends on the template in
the path, because a cleaning fee changes what a guest pays and a minimum stay
does not. The refusal is the same 403 insufficient_scope, naming
pricing:write. The two READS apply the same requirement without erroring:
GET /listings/{listing_id}/quick-actions still lists the pricing.* rows but
withholds their applied state, and GET /listings/{listing_id}/rules omits the
pricing rules entirely and reports pricing_withheld in warnings. These four
are the only operations in this document whose requirement is not exactly their
x-maat-scope, and each of them says so machine-readably:
x-maat-scope-additional lists the second scope it can require and
x-maat-scope-additional-when says what happens without it.
Never send it as a cookie or in a query string, and never store it — store the API key, mint tokens from it.
Query Parameters
1-based page number. Defaults to the first page.
x >= 1Rows per page. The same default and the same ceiling on every list in this API.
A page_size above the maximum is refused with validation_failed naming
the parameter — never silently clamped, because a caller who believes they asked
for 500 and received 200 will stop walking a set they have not finished.
1 <= x <= 200Response
One page of your properties.
One page of properties, newest first.
Show child attributes
Show child attributes
Whether another page exists. There is no total: counting the whole set to answer one page is work neither of us needs.
Pages are numbered, and the list is newest first, so a row that lands while you are walking shifts the ones behind it. A long walk can therefore see a row twice or miss one. Key what you collect by its own id and treat the walk as eventually complete rather than exact, or narrow with the filters this operation offers so the set you are paging cannot move.