DevelopersRead only

list_bookings

API reference — one of six tools an AI assistant can call on an Avrosh account.

What it does

Bookings for one business, pending holds first. Default shows only actionable states (pending, confirmed, checked in); status 'all' includes cancelled, expired and completed. query substring-matches the customer's name, phone or email - use it to find 'the booking under Wijaya' before confirming or cancelling anything. Each row carries the customer, the dates or slot, the money (totalOwed = base + extras), and its id for the transition tools. Times are UTC; capped at 500 rows.

This is the exact text the model reads before deciding to call.

Parameters

business_idstringrequired

The id returned by list_businesses.

statusstringoptional

Default 'open' - the actionable states only.

one of: open · all

querystringoptional

Substring of the customer name, phone or email.

Request

curl -X POST https://us.avrosh.com/mcp \
  -H "Authorization: Bearer $AVROSH_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_bookings","arguments":{"business_id":"926135ac-487d-4367-8bad-25397d0d4b87","query":"Wijaya"}}}'

Response

The result arrives as an MCP content block; the JSON below is what the text field parses to.

{
  "bookings": [
    {
      "id": "b901…",
      "status": "confirmed",
      "guestName": "Budi Wijaya",
      "checkin": "2026-08-20",
      "checkout": "2026-08-22",
      "nights": 2,
      "currency": "IDR",
      "amountTotal": 1100000,
      "totalOwed": 1100000,
      "roomType": "Deluxe Garden"
    }
  ],
  "count": 1
}

Authentication

Every request carries Authorization: Bearer avk_…. Create a key in the Avrosh dashboard under Docs; it is shown once, because only its hash is stored.

One key reaches every business on the account that made it, and no others. There are no scopes to configure and nothing to switch on — a connected assistant receives the whole toolset. What bounds it is whose account the key belongs to, which is enforced in the database rather than by a permission anybody sets.

curl https://us.avrosh.com/mcp \
  -H "Authorization: Bearer $AVROSH_KEY"