Core concepts
Endpoints and rate limits
All endpoints in one table and the shared limit of 60 requests per minute.
All paths are relative to the base URL, for example https://management.horeca-24.de/api/partner/v1. The host can differ by region, so always use the base URL the restaurant gave you.
| Method and path | Purpose | Rate limit per connection |
|---|---|---|
GET /ping | Check the key and read the connection's state | – |
GET /webhook | Read the webhook URL and the dates of the active secrets | – |
PUT /webhook | Set or change the webhook URL | – |
POST /webhook/rotate-secret | Get a new signing secret | – |
POST /orders | Create an order | 60 per minute, shared |
GET /orders/{externalId} | Read an order's status | – |
POST /orders/{externalId}/cancel | Cancel an order | 60 per minute, shared |
POST /orders/{externalId}/delivery | Courier update (your own courier only) | 60 per minute, shared |
POST /orders, cancel and delivery share one budget of 60 requests per minute and connection, counted in fixed one-minute windows. Over the limit you get 429 RATE_LIMITED with Retry-After (seconds until the window ends). The other routes have no limit of their own, but please poll them with moderation.