Sandbox orders are test bookings

Sandbox keys reach the airlines’ test systems: nobody flies on these orders and no booking fee is charged. Check status and tickets[], not the HTTP code.

Servicing

Order history

Everything that happened to the booking — through Norba and, where the carrier exposes it, at the airline.

GET/v1/orders/{orderID}/historyRequires X-API-Key

The order's timeline, oldest first. Events with source: "norba" passed through this API (or are schedule changes the airline notified); events with source: "airline" come from the airline's own record, where it offers one. airline_history says whether that part is included, unavailable or not_supported.

Request example

curl --request GET \
  --url https://api.norba.io/v1/orders/{orderID}/history \
  --header "X-API-Key: $NORBA_KEY"

Response example

{
  "order_id": "AA001Y1XD7ZA6",
  "airline_history": "not_supported",
  "events": [
    {
      "event_type": "created",
      "occurred_at": "2026-09-19T10:02:11Z",
      "actor": "agency",
      "to_status": "confirmed",
      "source": "norba"
    },
    {
      "event_type": "seats_assigned",
      "occurred_at": "2026-09-19T10:09:40Z",
      "actor": "agency",
      "from_status": "confirmed",
      "to_status": "confirmed",
      "payload": {
        "seats": 1,
        "extras_amount": 23,
        "currency": "EUR"
      },
      "source": "norba"
    },
    {
      "event_type": "segments_cancelled",
      "occurred_at": "2026-09-21T08:15:02Z",
      "actor": "support",
      "from_status": "ticketed",
      "to_status": "partially_cancelled",
      "payload": {
        "segment_ids": [
          "SEG-2"
        ],
        "cancel_offer_id": "AA-RF2B…"
      },
      "source": "norba"
    }
  ]
}

Authorization

X-API-KeystringRequired

Your API key from the dashboard. A missing or invalid key answers 401; see Authentication.

Path parameters

orderIDstringRequired

Canonical order ID.

Example: AA001Y1XD7ZA6

Response fields

airline_historystringRequired

included, unavailable or not_supported.

events[]array<object>Required

event_type (created, committed, reissued, changed, seats_assigned, services_added, segments_cancelled, cancelled, refunded, refreshed, segment_changed, disrupted), occurred_at, actor (agency, support, system, airline), from_status, to_status, payload, source.

order_idstringRequired

The order.

Error codes

404

order_not_found — not this account's order in this key's environment.