Save a vacation rental for the signed-in guest

PUT /v1/developer/guest/me/saves/{vacationRentalSlug}

Operation ID: saveDeveloperGuestVacationRental

Save a vacation rental for the signed-in guest

Contract status

Field	Value
Maturity	`beta`
Required capability	`guest_auth.write`
Freshness class	`authenticated-state`
Quota cost	`1`
Operational owner	Identity + Developer Experience

All operations require a Kismet Developer Bearer credential. Collection and resource authority is resolved from the credential’s installation grants; identifiers in the URL never grant access.

Request parameters

Name	In	Type	Required	Description
`vacationRentalSlug`	path	string	yes
`x-kismet-guest-token`	header	string	yes	Server-only Kismet guest access token held by the same-origin BFF. Never expose it to browser JavaScript.
`x-kismet-csrf`	header	string	yes	Opaque CSRF proof validated by the same-origin host BFF before it calls Kismet.

Request body

This operation has no JSON request body.

cURL

curl --request PUT \
  "$KISMET_API_ORIGIN/v1/developer/guest/me/saves/sand-sea-110" \
  --header "Authorization: Bearer $KISMET_DEVELOPER_API_KEY" \
  --header "Accept: application/json"

Responses

Status	Meaning
200	Success.
400	Invalid request parameters or body.
401	Missing, invalid, expired, or inappropriate credential/session.
403	Credential lacks the required grant/capability, or an origin/CSRF check failed.
404	The authorized resource was not found.
429	Rate limit or quota exceeded; inspect response metadata before retrying.
503	A required Kismet dependency is temporarily unavailable.

Success example

{
  "saved": true,
  "vacationRentalSlug": "sandbox-chalet"
}

Machine-readable sources