Build on VIX Ticketing.

Base URL

https://harborviewopps.com/vix/api/v1/

Responses are JSON. Public read endpoints send Cache-Control: no-store. Scanner operations require a provisioned device secret.

Hosted storefront

/vix/event/{organization-slug}/{event-slug}/

The hosted storefront reads tenant/event configuration and live ticket inventory from the VIX data model. Reservations are server-priced, CSRF-protected and inventory-checked in a database transaction. Unpaid reservations expire automatically and release held inventory.

Event catalogue

/events.php
/events.php?organization=vix-demo

Returns active events, venue information and currently active ticket products. Customer information is never included.

Example response fields

{
  "ok": true,
  "count": 1,
  "events": [{
    "name": "Global Event Demo",
    "event_type": "music_festival",
    "currency": "USD",
    "products": [{
      "code": "GA",
      "price_cents": 8900,
      "available": 5572
    }]
  }]
}

Verify credential

/verify.php?credential=VIX-DEMO-000001

Returns credential state, event identity, permitted access zones and the latest VIX verification record. It deliberately does not return purchaser PII.

Scanner check-in

/checkin.php
Authorization: Bearer <scanner-secret>
Content-Type: application/json

{
  "credential_code": "VIX-...",
  "zone_code": "VIP"
}

Scanner secrets are generated in secured administration and displayed once. VIX stores only the SHA-256 hash. The endpoint checks scanner status, event scope, credential state, zone entitlement and re-entry policy before recording admission.

Without a scanner key the endpoint returns 401 scanner_auth_required.

Blockchain record states

The platform does not label a record anchored merely because a local hash exists.

Administration

The secured administration surface supports tenant-scoped organizations, events, ticket products, credentials, access zones, scanner provisioning, orders, settlements, VIX records and audit trails.