# Worldia

> Worldia is a Paris-based B2B2C travel technology company (founded 2012, headquartered in
> Montreuil, France) whose platform lets travel distributors, retailers and agents build,
> price and book personalized tailor-made trips across 80+ destinations. Partners are
> onboarded as branded "channels" — 388 are live — each with its own storefront, currency,
> locale and legal document set.

This file was generated by API Evangelist from artifacts in this repository. It is not
published by Worldia. Worldia serves no llms.txt of its own on any host.

## Important caveats for an agent

- **There is no OpenAPI, GraphQL SDL, AsyncAPI or Postman collection.** Worldia publishes no
  machine-readable API contract and no developer documentation. Everything below was
  established by probing the live API on 2026-09-04.
- **There is no self-service access.** No signup, no API keys page, no sandbox, no pricing.
  Access is negotiated commercially through a demo request.
- **The API advertises documentation it does not serve.** Every response carries a Hydra
  `apiDocumentation` Link header pointing at https://api.worldia.com/docs.jsonld, and that
  URL returns HTTP 404 under every content type. Do not treat the header as a live pointer.
- **Do not infer write semantics.** The JSON-LD model describes trips, checkouts, payments
  and archival, but no write operation, cancellation path or refund window is documented
  anywhere. Never assume a booking made through this API can be reversed, or within what
  period. That is a question for Worldia, not for inference.

## API

- [Worldia API](https://api.worldia.com): Production REST API built on API Platform
  (Symfony). Content-negotiates `application/vnd.worldia+json` (default,
  `{meta,data}` envelope), `application/ld+json` (Hydra collections), and
  `application/problem+json` (errors). `https://api.prod.worldia.com` is a 301 alias.
- Authentication: bearer JWT (`Authorization: Bearer <token>`; a missing token returns
  `{"code":401,"message":"JWT Token not found"}`). No OAuth2 and no OpenID Connect — both
  well-known documents 404 on every host. No token endpoint is publicly routed.
- Tenancy: channel-scoped collections require an `X-Channel` header naming a registered
  channel code. This is a tenant selector, not a credential; valid codes are readable
  anonymously at `GET /channels`.
- Pagination: `page` (1-based) and `itemsPerPage`, default page size 30. Hydra responses
  carry `hydra:totalItems` and a `hydra:view` PartialCollectionView.
- Filtering: advertised per collection as a `hydra:search` IriTemplate. There is no single
  document listing them; they are discovered by calling each collection.

## Readable without credentials

- `GET /channels` — 388 distribution channels, each with branding, hostname, currency, locale.
- `GET /channels/{code}` — one channel, e.g. `/channels/B2B-LTUR-DE`.
- `GET /locations` — geographic hierarchy, typed `https://schema.org/Place`. Advertises a
  hydra:search template with `full_text_search_name`, `fuzzy_name`, `leaf`, `level`,
  `promoted`, `parent`, `root` and `addressComponents.type`.
- `GET /themes` — 24 trip themes (requires `X-Channel`).
- `GET /accommodations` — 16,943 properties (requires `X-Channel`).
- `GET /inspirations` — 971 itinerary templates (requires `X-Channel`). Note the members
  identify themselves as `/templates/{id}`.
- `GET /airports` — air gateway reference data with IATA and ICAO codes (requires `X-Channel`).
- `GET /contexts/{Type}` — JSON-LD context documents.

## Requires authentication

- `GET /customers` — 401, `WWW-Authenticate: Bearer`.
- `GET /templates` — 403, "Unable to access as unauthorized user".

## Machine-readable artifacts Worldia does publish

- [JSON-LD contexts](json-ld/worldia-json-ld.yml): 16 context documents, 723 declared terms,
  fetched verbatim from `/contexts/{Type}` — Channel, Location, Place, Template, Theme, Trip,
  Customer, Accommodation, Airport, Payment, Agent, Transfer, Car, Train, Document, Route.
  These are the only machine-readable description of the Worldia model in existence.

## Artifacts derived by API Evangelist

- [Data model](data-model/worldia-data-model.yml): 16 entities, 37 relationships, derived
  from the `@type: @id` references in the JSON-LD contexts.
- [Vocabulary](vocabulary/worldia-vocabulary.yml): 27 domain terms.
- [Conventions](conventions/worldia-conventions.yml): content negotiation, pagination,
  tracing, caching, idempotency (none), reversibility (unknown — read the caveat above).
- [Error catalog](errors/worldia-problem-types.yml): six observed failure modes across three
  different error body shapes.
- [Authentication](authentication/worldia-authentication.yml).
- [Conformance](conformance/worldia-conformance.yml): JSON-LD, partial Hydra, partial
  RFC 7807, W3C Trace Context, schema.org (places only), IATA/ICAO, ISO 4217/639/3166.
- [Lifecycle](lifecycle/worldia-lifecycle.yml): no versioning, no deprecation policy, no
  changelog, no status page, no SLA.
- [Packages](packages/worldia-packages.yml): five first-party Packagist packages, none of
  which is a Worldia API client.
- [Rate limits](rate-limits/worldia-rate-limits.yml): none documented, none signaled.
- [Plans and pricing](plans/worldia-plans-pricing.yml): none published.
- [Domain security](security/worldia-domain-security.yml): TLS 1.3, HSTS with preload on the
  API host, DNSSEC, SPF, DMARC p=none, no CAA.
- [Well-known probe](well-known/worldia-well-known.yml): no first-party well-known document
  on any host.

## Company

- [Corporate site](https://corp.worldia.com/)
- [About](https://corp.worldia.com/about-us)
- [Contact](https://corp.worldia.com/contact)
- [Careers](https://careers.worldia.com/) (hosted Teamtailor; its api-catalog and llms.txt
  are Teamtailor platform features, not Worldia publications)
- [GitHub organization](https://github.com/worldia) — Symfony engineering tooling; no API
  specs, SDKs or docs.
- [Terms of use](https://corp.worldia.com/hubfs/website%20-%20v3/legal/terms-of-use-EN.pdf)
- [Privacy policy](https://static.worldia.com/documents/privacy-policy/GB.pdf)