Introduction

Blue's LTCR Workshop Booking API lets long-term-rental partner integrators — such as the team that operates bluecarrental.is — book workshop service appointments (tire change, oil and lube service, or other work) on behalf of the long-term-rental customers they serve, for the cars those customers are renting from Blue Car Rental. It replaces a previous manual booking workflow.

Base URLs

API version

This document covers v1. All paths are prefixed with /api/v1/workshop. All timestamps are RFC 3339 in UTC. Requests and responses are JSON.

Getting started

Four steps to your first booking:

1. Request an API key from Blue Car Rental (see Authentication).
2. Call GET /api/v1/workshop/locations to list active workshop locations.
3. Call GET /api/v1/workshop/availability to retrieve bookable slots for the location and date range your customer is choosing from.
4. Call POST /api/v1/workshop/bookings with the chosen slot and the customer's contact details. The response includes a tokenised cancel URL Blue Car Rental will email the customer.

End-to-end example

# 1. List locations
curl -s https://ltcr-workshop-booking-api.bluecarrental.is/api/v1/workshop/locations \
  -H "X-API-Key: bws_a1b2c3d4_"

# 2. Check availability for Keflavík next week
curl -s "https://ltcr-workshop-booking-api.bluecarrental.is/api/v1/workshop/availability?location=keflavik&from=2026-05-19&to=2026-05-23" \
  -H "X-API-Key: bws_a1b2c3d4_"

# 3. Book the 09:00 slot on 2026-05-19
curl -s -X POST https://ltcr-workshop-booking-api.bluecarrental.is/api/v1/workshop/bookings \
  -H "X-API-Key: bws_a1b2c3d4_" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: 9b1c-7e2f-2026-05-19-keflavik-AB123" \
  -d '{
    "location": "keflavik",
    "slot_start_at": "2026-05-19T09:00:00Z",
    "service_type": "dekkjaskipti",
    "customer": {"name": "Kalli Bimbo", "email": "kalli@example.is", "phone": "+3546901588"},
    "license_plate": "AB123"
  }'

Authentication

Every request must include an API key in the X-API-Key header. Keys are issued by Blue Car Rental — there is no self-service signup.

Header

X-API-Key: bws_a1b2c3d4_e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0

Key format

An API key is three underscore-separated parts: a fixed scheme tag, a public prefix, and a secret.

Onboarding

Email Blue Car Rental to request a key. You will receive one production key and one staging key. Keys are not recoverable: if you lose a key, Blue Car Rental rotates it and issues a new one.

Rotation and deactivation

Blue Car Rental can rotate or deactivate any key at any time. Your integration should handle:

• 401 unauthorized — the key is missing, malformed, or no longer recognised. Stop sending requests with that key and contact Blue Car Rental.
• 403 forbidden — the key is recognised but the partner has been deactivated.

Concepts

Locations

A location is a physical workshop site. The v1 launch ships with one location: keflavik (Keflavík). The schema is multi-location-ready; new locations are added over time by Blue Car Rental.

Slots and availability

Slots are not stored — they are derived per request from operating-hour rules, blackouts, and existing bookings. Always call /availability immediately before showing a calendar to the customer. Do not cache slots client-side. The server caches the response for 30 seconds.

Service types

Idempotency

The POST /bookings endpoint accepts an Idempotency-Key header (≤255 characters). Replaying the same key with the same payload returns the original booking instead of creating a duplicate. Replaying the same key with a different payload returns 409 idempotency_conflict. Keys are honoured for 24 hours; after that they are pruned and a replay creates a new booking.

Cancellation flow

When a booking is created, Blue Car Rental emails the customer a confirmation with a tokenised cancel link. The customer clicks the link to cancel. Partners do not call /cancel directly — the endpoint is documented for completeness only.

Rate limits

Exceeded → 429 rate_limited with a Retry-After header. Back off and retry.

Time zones

All slot_start_at values are UTC. The workshop in Keflavík operates in Atlantic/Reykjavik. Render times in the customer's local timezone in your UI, but always send and store UTC.

List locations

curl -s https://ltcr-workshop-booking-api.bluecarrental.is/api/v1/workshop/locations \
  -H "X-API-Key: bws_a1b2c3d4_<your-secret>"

{
  "locations": [
    {"slug": "keflavik", "name": "Keflavík", "timezone": "Atlantic/Reykjavik"}
  ]
}

Check availability

curl -s "https://ltcr-workshop-booking-api.bluecarrental.is/api/v1/workshop/availability?location=keflavik&from=2026-05-19&to=2026-05-23" \
  -H "X-API-Key: bws_a1b2c3d4_<your-secret>"

{
  "location": "keflavik",
  "slots": [
    {"start_at": "2026-05-19T09:00:00Z", "end_at": "2026-05-19T10:00:00Z"},
    {"start_at": "2026-05-19T10:00:00Z", "end_at": "2026-05-19T11:00:00Z"}
  ]
}

Create a booking

curl -s -X POST https://ltcr-workshop-booking-api.bluecarrental.is/api/v1/workshop/bookings \
  -H "X-API-Key: bws_a1b2c3d4_<your-secret>" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: 9b1c-7e2f-2026-05-19-keflavik-AB123" \
  -d '{
    "location": "keflavik",
    "slot_start_at": "2026-05-19T09:00:00Z",
    "service_type": "dekkjaskipti",
    "customer": {"name": "Kalli Bimbo", "email": "kalli@example.is", "phone": "+3546901588"},
    "license_plate": "AB123",
    "mileage": 12345,
    "message": "Vil skipta yfir í sumardekk."
  }'

{
  "booking_id": "5f8e3b1c-4e2a-4a91-9b8f-2c7d6e5a4b3c",
  "status": "active",
  "location": "keflavik",
  "slot_start_at": "2026-05-19T09:00:00Z",
  "slot_end_at": "2026-05-19T10:00:00Z",
  "service_type": "dekkjaskipti",
  "cancel_url": "https://ltcr-workshop-booking-api.bluecarrental.is/api/v1/workshop/bookings/5f8e3b1c-4e2a-4a91-9b8f-2c7d6e5a4b3c/cancel?token=..."
}

Read a booking

curl -s https://ltcr-workshop-booking-api.bluecarrental.is/api/v1/workshop/bookings/5f8e3b1c-4e2a-4a91-9b8f-2c7d6e5a4b3c \
  -H "X-API-Key: bws_a1b2c3d4_<your-secret>"

{
  "booking_id": "5f8e3b1c-4e2a-4a91-9b8f-2c7d6e5a4b3c",
  "status": "active",
  "location": "keflavik",
  "slot_start_at": "2026-05-19T09:00:00Z",
  "slot_end_at": "2026-05-19T10:00:00Z",
  "service_type": "dekkjaskipti",
  "customer": {"name": "Kalli Bimbo", "email": "kalli@example.is", "phone": "+3546901588"},
  "license_plate": "AB123",
  "mileage": 12345,
  "message": "Vil skipta yfir í sumardekk.",
  "cancelled_at": null
}

Cancel a booking

{
  "booking_id": "5f8e3b1c-4e2a-4a91-9b8f-2c7d6e5a4b3c",
  "status": "cancelled",
  "cancelled_at": "2026-05-17T14:23:08Z"
}

Errors

Errors return a uniform JSON envelope:

{
  "error": "slot_taken",
  "message": "That slot was just booked. Please choose another time.",
  "details": {
    "slot_start_at": "2026-05-19T09:00:00Z"
  }
}

HTTP status codes

Retry guidance

• Retry 429 and 5xx with exponential backoff (e.g. 1s, 2s, 4s, 8s, cap at 60s).
• Always include the original Idempotency-Key when retrying POST /bookings — without it, retries may create duplicate bookings.
• Never retry any other 4xx.