What is NDC and why do I need an aggregator?

NDC (New Distribution Capability) is IATA's XML messaging standard for selling airline products. Every airline implements it differently. An aggregator gives you one integration that handles all those quirks.

How does pricing work?

You pay per request for data lookups (€0.01/request, first 50 free each month) and transaction fees when bookings, seats, or ancillaries are completed.

Orders endpoints in development

The Orders API endpoints are currently under active development. Request/response shapes may change.

Orders

Pay order

Submit payment and trigger ticket issuance — the final step to complete a booking.

POST/v1/orders/{orderID}/payRequires X-API-Key

After creating an order (status: confirmed), call this endpoint to process payment and trigger ticket issuance with the airline.Supported payment methods:
- card — Tokenized card via your payment processor
- iata_bsp — IATA BSP/ARC settlement
- bank_transfer — Direct bank transfer
- wallet — Digital walletOn success, the order status changes to ticketed and the response includes ticket numbers — 13-digit identifiers the traveler uses for check-in.The complete journey: Search → Price-lock → Create order → Pay → Ticketed ✓Until payment is submitted, the reservation is held but not yet ticketed.

Request example

curl --request POST \
  --url https://api.norba.io/v1/orders/{orderID}/pay \
  --header "X-API-Key: $NORBA_KEY" \
  --header "Content-Type: application/json" \
  --data '{ "method": "card", "amount": 249.00, "currency": "EUR", "token": "tok_3K..." }'

Response example

{
  "order_id": "ord_01...",
  "status": "ticketed",
  "total_price": {
    "amount": 249,
    "currency": "EUR"
  },
  "tickets": [
    {
      "ticket_number": "053-1234567890",
      "passenger_id": "pax1",
      "status": "issued"
    }
  ]
}

Authorization

X-API-KeystringRequired

Opaque API key issued from the Norba dashboard. Sent on every request as the X-API-Key HTTP header. Missing or invalid keys are rejected with 401 Unauthorized.

Path parameters

orderIDstringRequired

Order ULID.

Example: ord_01HVN9M5K...

Request body

methodstringRequired

Payment method: card, iata_bsp, bank_transfer, or wallet.

Example: card

amountnumberRequired

Amount to charge in the order's currency. Should match total_amount from the order.

Example: 249.00

currencystringRequired

ISO 4217 currency code. Must match the order's currency.

Example: EUR

tokenstring

Payment token from your payment processor. Required for card method only.

Example: tok_3K...

Error codes

payment_declined

Payment processor rejected the charge.

order_already_ticketed

Order has already been ticketed.