# TimeSlot API

> A privacy-focused group scheduling API for collecting availability and confirming meeting times.

## Quick Start

TimeSlot helps you schedule meetings by collecting when attendees are available.

Typical workflow:
1. Create an event with proposed time slots
2. Share the public URL with attendees
3. Attendees submit which slots work for them
4. Review responses and confirm a final time

## API Documentation

OpenAPI specification: /api/v1/openapi.json

The API uses REST conventions with JSON request/response bodies.

## Authentication

- Public endpoints (getEvent, submitResponse): No authentication
- Attendee endpoints (updateResponse): Requires responseToken from submission
- Admin endpoints (getEventAdmin, confirmEvent, reopenEvent, deleteResponse): Requires adminToken from event creation

Tokens are passed in the request body, not headers.

## Key Operations

- createEvent: POST /api/v1/events - Create a scheduling poll
- getEvent: GET /api/v1/events/{slug} - View event details
- submitResponse: POST /api/v1/events/{slug}/responses - Submit availability
- confirmEvent: POST /api/v1/events/{slug}/confirm - Lock in final time

## Important Notes

- All times are in ISO 8601 UTC format
- Admin tokens cannot be recovered - store them securely
- Events expire 30 days after the latest proposed slot
- Names must be unique within an event (case-insensitive)