easyJet

easyJet Airline Company Limited is a British low-cost short-haul carrier registered in England (company number 03034606, registered office Hangar 89, London Luton Airport, Luton, Bedfordshire, LU2 9PF), flying a point-to-point network that its own trade pages describe as connecting more than 155 airports across 35 countries. Its home market is the United Kingdom and its commercial centre of gravity is intra-European leisure and short-haul business traffic, extended by the easyJet holidays package business and by ancillary products (seat selection, hold and large cabin bags, Flex, Pass Extra, Smart+, Inclusive and Inclusive Plus fare bundles). easyJet sits at the direct end of the airline distribution chain. It was built without a GDS dependency and still sells the overwhelming majority of its seats through its own website and app; agency and OTA access exists but is a controlled secondary channel rather than the primary rail. That channel is governed by a published Distribution Charter (version March 2026) which permits a Reseller to access easyJet Data in exactly two ways — "via an easyJet Approved Channel which has entered into an API agreement with easyJet" or "directly via the easyJet API, if the Reseller has a Direct API Agreement with easyJet" — and which explicitly forbids screen scraping and any other automated extraction. easyJet publishes the list of Approved Channels and a per-partner functionality matrix current to the end of May 2026: Amadeus, Anaxys, Bewotec, Duffel, JFA Systems, Kyte, Paxport, Peakwork, Sabre, Travelfusion, Travelport, Traveltek, Viaxoft and Ypsilon. Its API posture, stated honestly, is commercial-agreement-gated and undocumented. There is no developer portal — developer, developers, docs, apis, ndc, partner, partners, trade, agent, sandbox, dev, portal, connect and xml subdomains of easyjet.com all fail to resolve — and no machine-readable contract of any kind is published: no OpenAPI, no Swagger, no AsyncAPI, no GraphQL schema, no security.txt, no llms.txt and no .well-known API catalogue. Two real API hostnames do exist, api.easyjet.com and b2b.easyjet.com, but both sit behind Akamai and return HTTP 403 Access Denied on every path probed. Just as importantly, easyJet is not an NDC carrier: the March 2026 charter never mentions NDC, easyJet does not appear on ndctracker.com's list of 73 airlines with launched or in-development NDC programmes, and its aggregators describe the connection as a direct-connect API rather than an NDC one — Duffel labels it "Direct Connect". A reseller therefore integrates against a bilateral, proprietary, unpublished interface under an English-law contract that easyJet may amend without notice and under which it reserves the right to restrict, suspend or terminate access and to cancel bookings already made. A second enrichment pass on 2026-07-28 did find one live, anonymously reachable easyJet integration surface the first pass missed: the easyWidget / easyDom partner component platform at brand.easyjet.com, a hosted JavaScript widget service that partner and white-label sites embed for easyJet page chrome and for easyJet customer sign-in, registration and visitor recognition. It is undocumented, partner-scoped by a query-string partner identifier and built on legacy jQuery, but it is real and it is the only easyJet interface that answers a stranger with a 200. The REST hostnames stay closed, and this record stays honest about the difference: only what can be verified is catalogued, and an Akamai-gated hostname is still not listed as an API.

Kin Score

This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance. Every facet and dimension name is a link: it opens that measurement's page on APIs.io, where the rating runs across the whole catalog — the exact checks that feed it, how every profiled provider distributes on it, and who is at the top of it.

How we profile easyJet

Each block below is one kind of artifact we hold for easyJet. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.

APIs 1

Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.

Individual APIs this provider publishes, each with its own machine-readable definition.

easyJet Brand Widget Service (easyDom)

easyJet's hosted client-side widget platform for partner and white-label sites. Each widget is a script tag on brand.easyjet.com whose behaviour is driven by query-string parame...

Security Posture 1

Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Easyjet Domain Security

TLSv1.3 · DMARC

SECURITY

Resources

Every other property we hold for easyJet — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.

← All providers · Data indexed from github.com/api-evangelist/easyjet · machine-readable index on apis.io