Make Your First Request

Use /search/destination as the first integration check after you have implemented signing.

Prerequisites

• Your sandbox application is active and authorized for G-Link Hotel API.
• The App Key belongs to the sandbox environment.
• Your server clock is synchronized.
• You generate a new timestamp and nonce for every call.

Request steps

1. Build the JSON request body using the fields defined in the Query destination API Reference page.
2. Calculate BODY_SHA256 from the exact raw UTF-8 body.
3. Build and sign the canonical string using the full path /openapi/v1/glink/search/destination.
4. Send the request with all required X-OP-* headers.
5. Verify both the HTTP response and the business code. A successful request has code: SUCCESS.

Troubleshooting checklist

• Check the signed path includes /openapi/v1/glink.
• Confirm the raw JSON bytes used for SHA256 are identical to the sent body.
• Do not reuse the nonce when retrying.
• Retain request_id and trace_id from unsuccessful responses for support.

The ReadMe API Explorer does not generate the dynamic X-OP-Sign value. Run signed calls from your server, SDK, or a Postman pre-request script.