ShuttleID Docs

Domains / Subdomains

⚠️ Whilst this was fully Human written, AI has been used in this section to help understand the JS files to understand domains locked behind logins better.

Table of Domains

DOMAIN	STATUS	NOTES
admin.shuttleid.uk	Assumed	Admin Panel for ShuttleID Staff
booker.shuttleid.uk	Known	Seat Allocation, Stop Selection, etc
driver.shuttleid.uk	Known	Handles GPS Updates for Tracking
scan.shuttleid.uk	Known	Handles Ticket Scan & Audio Feedback
help.shuttleid.uk	Public	Helpdesk Portal
agent.shuttleid.uk	Known	Management Page for Operators
track.shuttleid.uk	Known	Tracking Page for Clients
client.shuttleid.uk	Public?	Older Passenger Portal
archwaytravel.shuttleid.uk	Public	Branded Passenger Portal
atbrown.shuttleid.uk	Public	Branded Passenger Portal
boylansbuses.shuttleid.uk	Public	Branded Passenger Portal
dartlinecoaches.shuttleid.uk	Public	Branded Passenger Portal
endeavourcoaches.shuttleid.uk	Public	Redirects to tripable.shuttleid.uk
m.test.shuttleid.uk	Unknown	Doesn’t Load, Irish AWS IP
passenger.shuttleid.uk	Public	Generic Passenger Portal
pulhamscoaches.shuttleid.uk	Public	Branded Passenger Portal
ticket.shuttleid.uk	Public	Shows Tickets & Tracking for Passengers
tripable.shuttleid.uk	Public	Branded Passenger Portal
voucher.shuttleid.uk	Public	Site for Passengers to buy Vouchers
wallet-api.shuttleid.uk	Unknown	Doesn’t Load, Irish AWS IP
wallet-api.test.shuttleid.uk	Unknown	Doesn’t Load, Irish AWS IP

Key Terms

Assumed - Not Live Right Now or Requires Login but plausible explanation
Unknown - Doesn’t Load or No Content or Requires Login
Public - Designed for Passengers to Access
Known - Known but not Designed for the public (or passengers anyway)
Operators - Bus/Coach Companies
Passengers - The Riders getting on&off the coaches (aka; you & me)

Other Notes

Pulhams and Dartline are both part of GoAhead and both not only use ShuttleID but have branded passenger portals too.

ShuttleID API Reference

⚠️ This Section has been FULLY Generated by AI (XAI Grok) fed on the JS from various ShuttleID domains.

Public APIs (No Authentication Required)

1. Customer / Ticket API

Base URL: https://eryqma7z39.execute-api.eu-west-1.amazonaws.com/prod

Path	Method	Purpose
`/customer-ticket/{id}`	GET	Fetch ticket details
`/customer-ticket/{id}/boarding-notifications/{notifyKey}`	GET/PUT	View / update boarding notification preferences

2. Live Tracking API (Public)

Base URL: https://k4dxsjc6v3.execute-api.eu-west-1.amazonaws.com/prod

Path	Method	Purpose
`/live-tracking/client/{clientId}/public`	GET	Public live vehicle positions

Authenticated APIs (Cognito JWT Required)

All endpoints below require the header:
Authorization: <Cognito ID Token JWT>

3. Live Tracking API (Authenticated)

Base URL: https://k4dxsjc6v3.execute-api.eu-west-1.amazonaws.com/prod

Path	Method	Purpose
`/live-tracking/customer-ticket/{id}`	GET	Ticket-linked tracking
`/live-tracking/...` (driver endpoints)	GET/POST	Drivers post GPS updates

4. Booker API

Base URL: https://e4layl3s2l.execute-api.eu-west-1.amazonaws.com/prod

Path	Method	Purpose
`/bookings/{clientId}/{YYYY-MM-DD}`	GET	Pull daily bookings
`/bookings/{clientId}/{YYYY-MM-DD}`	POST	Sync dirty bookings

5. Mandates / Direct Debit API

Base URL: https://crvmifrey2.execute-api.eu-west-1.amazonaws.com/prod

Path	Method	Purpose
`/user/{userId}/mandates/{mandateId}`	GET	Fetch mandate / bank details

6. Multi-purpose Authenticated APIs

These are referenced by name in the Amplify config across Agent, Client, and Passenger portals.

API Name	Purpose
`api`	Core / general operations
`clientapi`	Client (operator) management
`customerticketapi`	Customer ticket management
`ticketapi`	Ticket products & inventory
`paymentapi`	Payment processing
`renewalapi`	Ticket renewals
`servicealertapi`	SMS service alerts
`waitinglistapi`	Waiting list management
`flexiapi`	Flexible / multi-trip tickets
`scansapi`	Scan history & validation data
`locationapi`	Live tracking (authenticated)
`bookerapi`	Bookings
`gocardlessapi`	GoCardless Direct Debit

Quick Reference – Public Endpoints

# Public live tracking
GET <https://k4dxsjc6v3.execute-api.eu-west-1.amazonaws.com/prod/live-tracking/client/{clientId}/public>

# Public ticket lookup
GET <https://eryqma7z39.execute-api.eu-west-1.amazonaws.com/prod/customer-ticket/{ticketId}>

ShuttleID Web Endpoints

⚠️ This Section has been FULLY Generated by AI (XAI Grok) fed on the JS from various ShuttleID domains.

This section doesn’t need Cognito Authentication.

1. Customer Ticket API

Base: https://eryqma7z39.execute-api.eu-west-1.amazonaws.com/prod

Path	Method	Description
`/customer-ticket/{ticketId}`	GET	Fetch full ticket details
`/customer-ticket/{ticketId}/boarding-notifications/{notifyKey}`	GET	Get boarding notification preferences
`/customer-ticket/{ticketId}/boarding-notifications/{notifyKey}`	PUT	Update boarding notification preferences

2. Live Tracking API

Base: https://k4dxsjc6v3.execute-api.eu-west-1.amazonaws.com/prod

Path	Method	Description
`/live-tracking/client/{clientId}/public`	GET	Public live vehicle positions for a client
`/live-tracking/customer-ticket/{ticketId}`	GET	Live tracking linked to a specific ticket

Notes

{ticketId} → usually the ticket_id or id from a ticket response

{notifyKey} → the notify_key field from the ticket

{clientId} → the client_id field from the ticket

All other API paths require a valid Cognito ID token