# Helloworld Travel

> Helloworld Travel Limited (ASX: HLO) is an Australian travel distribution group headquartered in Sydney, operating retail agency networks, corporate travel, wholesale packaging, air ticket consolidation and inbound tour operations across Australia, New Zealand, Fiji and Europe with more than 700 staff and over 2,700 retail members. It sits on the demand side of the travel distribution chain — an aggregator and reseller of third-party air, hotel and land content rather than an inventory owner.

**Helloworld Travel publishes no public API.** As of 2026-07-28 there is no developer portal, no API reference, no OpenAPI, Swagger, AsyncAPI, GraphQL, gRPC, MCP or Postman artifact, and no `/.well-known/` discovery document on any host in the group. Every trade system is an agent-login web application. A developer host is provisioned at `developer.readyrooms.com.au` but answers HTTP 401 with an HTTP Basic challenge on every path, so even the shape of the ReadyRooms partner interface is unknown from outside. This file exists so an agent does not waste effort hunting for an integration surface that is not there.

This document was generated by API Evangelist from the catalog record at `apis.yml`; it is not published by Helloworld Travel Limited.

## What an agent can and cannot do here

- **Cannot**: call an API, retrieve availability or rates, create or read a booking, obtain a key, sign up as a developer, or read a machine-readable contract. None of these has a public route.
- **Can**: read corporate identity, brand structure, policy and ASX disclosure from the public web pages listed below.
- **Access path**: partner-only. You must already be an accredited travel trade partner. ReadyRooms access is applied for through a Microsoft Forms application linked from its login page; AOTonline issues an Agency Code after a manual request answered within 24 business hours. There is no developer route at any price.
- **Exit path**: export-on-request only. The single documented way to get data back is a personal-information access request under the Australian Privacy Act to `privacyofficer@helloworld.com.au`. No export, dump or bulk operation is documented.
- **Licence constraint**: the Terms of Use grant a "limited, personal, non-transferable, revocable licence", and clause 8 forbids using, exporting, copying or republishing site material without prior written consent. AOTonline's terms separately forbid re-uploading its rates to any online booking website.

## Product surfaces (agent login, no API)

- [ReadyRooms](https://www.readyrooms.com.au/): B2B hotel and activity search, comparison and booking for agents; login at [athena.readyrooms.com.au](https://athena.readyrooms.com.au/)
- [AOTonline.net](https://www.aotonline.net/index.php): inbound trade shopping, quoting and booking of accommodation, transfers, car hire, tours, rail, attractions, fly-drives and packages; Agency Code + password login
- [Air Tickets / SmartTickets](https://www.airtickets.com.au/): fulfilment and ticketing, reissues, refunds, revalidations and post-ticketing processing for more than 100 international airlines
- [Express Tickets](https://expresstickets.com.au/): airfare and airline ticketing consolidation for agencies, tour operators and OTAs
- [developer.readyrooms.com.au](https://developer.readyrooms.com.au/): provisioned developer host, HTTP 401 Basic on every path, contents not published

## Company

- [Corporate website](https://www.helloworldlimited.com.au/)
- [About us](https://www.helloworldlimited.com.au/about-us/)
- [Brand divisions](https://www.helloworldlimited.com.au/brand-divisions/)
- [Franchisees](https://www.helloworldlimited.com.au/franchisees/)
- [Careers](https://www.helloworldlimited.com.au/careers/)
- [Contact](https://www.helloworldlimited.com.au/contact/)
- [Consumer website](https://www.helloworld.com.au/): find-an-agent only; the online booking engine has been retired
- [LinkedIn](https://www.linkedin.com/company/helloworld-com-au/)

## Investor and governance

- [Investors](https://www.helloworldlimited.com.au/investors/)
- [ASX announcements](https://www.helloworldlimited.com.au/asx-announcements/): the group's only dated, obligation-backed change feed
- [Annual reports](https://www.helloworldlimited.com.au/annual-reports/)
- [Corporate governance](https://www.helloworldlimited.com.au/corporate-governance/)
- [Corporate news feed (RSS)](https://www.helloworldlimited.com.au/feed/)

## Policy

- [Terms of use](https://www.helloworldlimited.com.au/terms-of-use/)
- [Privacy policy](https://policies.helloworldlimited.com.au/privacy-policy/)
- [Cookies policy](https://policies.helloworldlimited.com.au/cookies-policy/)
- [AOTonline terms and conditions](https://www.aotonline.net/terms_conds.php)

## API Evangelist artifacts

- [apis.yml](https://raw.githubusercontent.com/api-evangelist/helloworld-travel/refs/heads/main/apis.yml): the APIs.json catalog record
- [review.yml](https://raw.githubusercontent.com/api-evangelist/helloworld-travel/refs/heads/main/review.yml): the full switching-cost and access review, with every URL probed and its HTTP status
- [conformance/helloworld-travel-conformance.yml](https://raw.githubusercontent.com/api-evangelist/helloworld-travel/refs/heads/main/conformance/helloworld-travel-conformance.yml): negative conformance record — OpenAPI, AsyncAPI, GraphQL, OAuth2, OIDC, NDC, OpenTravel, HTNG all absent
- [lifecycle/helloworld-travel-lifecycle.yml](https://raw.githubusercontent.com/api-evangelist/helloworld-travel/refs/heads/main/lifecycle/helloworld-travel-lifecycle.yml): no versioning, deprecation policy, SLA, changelog or status page
- [security/helloworld-travel-domain-security.yml](https://raw.githubusercontent.com/api-evangelist/helloworld-travel/refs/heads/main/security/helloworld-travel-domain-security.yml): TLS, HSTS, DNSSEC, CAA, SPF and DMARC across nine hosts and six domains
- [well-known/helloworld-travel-well-known.yml](https://raw.githubusercontent.com/api-evangelist/helloworld-travel/refs/heads/main/well-known/helloworld-travel-well-known.yml): the full `/.well-known/` probe matrix, including which HTTP 200s are soft 404s