> ## Documentation Index
> Fetch the complete documentation index at: https://docs.passlet.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Create passes in batch

> Creates up to 100 passes in one call. The call returns `200` even when individual passes fail — check each `results[]` entry for its `success` flag and error. Every pass follows the same rules as single create, including `externalPassId` idempotency.

Requires the `passes:write` scope on the access token.



## OpenAPI

````yaml /api-reference/openapi.json post /v1/passes/batch
openapi: 3.1.0
info:
  title: Passlet API (Public)
  version: 0.1.0
  description: >-
    Public integration API for Passlet — every route callable with a `plt_*`
    access token. Each operation lists the required access-token scope.
  license:
    name: UNLICENSED
    identifier: UNLICENSED
servers:
  - url: https://api.passlet.io
    description: Production
security: []
paths:
  /v1/passes/batch:
    post:
      tags:
        - passes
      summary: Create passes in batch
      description: >-
        Creates up to 100 passes in one call. The call returns `200` even when
        individual passes fail — check each `results[]` entry for its `success`
        flag and error. Every pass follows the same rules as single create,
        including `externalPassId` idempotency.


        Requires the `passes:write` scope on the access token.
      operationId: postV1PassesBatch
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PublicCreateBatchPassesRequest'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PublicCreateBatchPassesResponse'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '404':
          description: Not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '409':
          description: Conflict
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '429':
          description: Rate limited
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '503':
          description: Service unavailable
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
      security:
        - bearerAuth: []
components:
  schemas:
    PublicCreateBatchPassesRequest:
      $schema: https://json-schema.org/draft/2020-12/schema
      type: object
      properties:
        passes:
          minItems: 1
          maxItems: 100
          type: array
          items:
            type: object
            properties:
              externalPassId:
                type: string
                minLength: 1
                maxLength: 255
                description: External system pass ID (used for idempotency)
              label:
                type: string
                minLength: 1
                maxLength: 255
                description: Pass holder display name
              templateId:
                type: string
                format: uuid
                pattern: >-
                  ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$
                description: Template to use for this pass
              variables:
                type: object
                propertyNames:
                  type: string
                additionalProperties: {}
                description: Variables to store as pass input data
            required:
              - externalPassId
              - label
              - templateId
              - variables
            additionalProperties: false
          description: Array of passes to create (max 100)
      required:
        - passes
    PublicCreateBatchPassesResponse:
      $schema: https://json-schema.org/draft/2020-12/schema
      type: object
      properties:
        totalRequested:
          type: integer
          minimum: -9007199254740991
          maximum: 9007199254740991
          description: Total passes requested
        totalCreated:
          type: integer
          minimum: -9007199254740991
          maximum: 9007199254740991
          description: Total passes successfully created
        totalFailed:
          type: integer
          minimum: -9007199254740991
          maximum: 9007199254740991
          description: Total passes that failed
        results:
          type: array
          items:
            type: object
            properties:
              externalPassId:
                type: string
                description: External pass ID from request
              success:
                type: boolean
                description: Whether this pass was created successfully
              pass:
                description: Pass data if successful
                type: object
                properties:
                  id:
                    type: string
                    format: uuid
                    pattern: >-
                      ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$
                    description: Pass identifier
                  externalPassId:
                    type: string
                    minLength: 1
                    maxLength: 255
                    description: External system pass ID
                  label:
                    type: string
                    minLength: 1
                    maxLength: 255
                    description: Pass holder display name
                  status:
                    type: string
                    enum:
                      - QUEUED
                      - ISSUING
                      - ISSUED
                      - VOID
                      - FAILED
                      - EXPIRED
                  version:
                    type: integer
                    exclusiveMinimum: 0
                    maximum: 9007199254740991
                    description: Optimistic locking version
                  templateVersionId:
                    anyOf:
                      - type: string
                        format: uuid
                        pattern: >-
                          ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$
                      - type: 'null'
                    description: >-
                      Template version the pass currently renders with. Pinned
                      at issue time; only changes via an explicit template
                      upgrade to a newer published version of the same template.
                  templateId:
                    anyOf:
                      - type: string
                        format: uuid
                        pattern: >-
                          ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$
                        description: Template identifier
                      - type: 'null'
                    description: Template identifier this pass was issued from
                  projectId:
                    anyOf:
                      - type: string
                        format: uuid
                        pattern: >-
                          ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$
                      - type: 'null'
                    description: Project the pass lives in
                  variables:
                    type: object
                    propertyNames:
                      type: string
                    additionalProperties: {}
                    description: Stored pass variables
                  redemption:
                    anyOf:
                      - type: object
                        properties:
                          windows:
                            minItems: 1
                            maxItems: 366
                            type: array
                            items:
                              type: object
                              properties:
                                start:
                                  type: string
                                  pattern: >-
                                    ^\d{4}-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])T([01]\d|2[0-3]):[0-5]\d(:[0-5]\d(\.\d+)?)?(Z|[+-]([01]\d|2[0-3]):[0-5]\d)$
                                end:
                                  type: string
                                  pattern: >-
                                    ^\d{4}-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])T([01]\d|2[0-3]):[0-5]\d(:[0-5]\d(\.\d+)?)?(Z|[+-]([01]\d|2[0-3]):[0-5]\d)$
                                maxUses:
                                  type: integer
                                  minimum: 1
                                  maximum: 100000
                              additionalProperties: false
                          maxUses:
                            type: integer
                            minimum: 1
                            maximum: 100000
                          perPeriod:
                            type: object
                            properties:
                              unit:
                                type: string
                                enum:
                                  - day
                                  - week
                                  - month
                              count:
                                type: integer
                                minimum: 1
                                maximum: 100000
                              timezone:
                                type: string
                                pattern: >-
                                  ^(?:UTC|GMT|[A-Za-z_]+\/[A-Za-z0-9_+-]+(?:\/[A-Za-z0-9_+-]+)?)$
                                description: IANA timezone identifier
                            required:
                              - unit
                              - count
                              - timezone
                            additionalProperties: false
                          minIntervalMinutes:
                            type: integer
                            minimum: 1
                            maximum: 527040
                          activation:
                            type: object
                            properties:
                              basis:
                                type: string
                                const: firstScan
                              validForHours:
                                type: integer
                                minimum: 1
                                maximum: 87840
                            required:
                              - basis
                              - validForHours
                            additionalProperties: false
                        additionalProperties: false
                      - type: 'null'
                    description: Resolved redemption policy enforced at scan time
                  expiresAt:
                    anyOf:
                      - type: string
                        format: date-time
                        pattern: >-
                          ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
                        description: ISO 8601 timestamp
                      - type: 'null'
                    description: Pass expiration timestamp
                  createdAt:
                    type: string
                    format: date-time
                    pattern: >-
                      ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
                    description: ISO 8601 timestamp
                  updatedAt:
                    type: string
                    format: date-time
                    pattern: >-
                      ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
                    description: ISO 8601 timestamp
                  hostedLinks:
                    type: object
                    properties:
                      apple:
                        anyOf:
                          - type: string
                            format: uri
                          - type: 'null'
                        description: Apple Wallet add link
                      google:
                        anyOf:
                          - type: string
                            format: uri
                          - type: 'null'
                        description: Google Wallet add link
                    required:
                      - apple
                      - google
                    additionalProperties: false
                    description: Hosted add-to-wallet links
                required:
                  - id
                  - externalPassId
                  - label
                  - status
                  - version
                  - templateVersionId
                  - templateId
                  - projectId
                  - variables
                  - redemption
                  - expiresAt
                  - createdAt
                  - updatedAt
                  - hostedLinks
                additionalProperties: false
              error:
                description: Error details if failed
                type: object
                properties:
                  code:
                    type: string
                  message:
                    type: string
                required:
                  - code
                  - message
                additionalProperties: false
            required:
              - externalPassId
              - success
            additionalProperties: false
          description: Results for each pass
      required:
        - totalRequested
        - totalCreated
        - totalFailed
        - results
      additionalProperties: false
    ApiError:
      $schema: https://json-schema.org/draft/2020-12/schema
      type: object
      properties:
        errorCode:
          type: string
          enum:
            - UNAUTHORIZED
            - FORBIDDEN
            - TOKEN_EXPIRED
            - TOKEN_INVALID
            - CSRF_TOKEN_INVALID
            - TENANT_EXPIRED
            - TENANT_NOT_FOUND
            - ORGANIZATION_REQUIRED
            - TENANT_SUSPENDED
            - VALIDATION_ERROR
            - INVALID_INPUT
            - MISSING_REQUIRED_FIELD
            - INVALID_FORMAT
            - NOT_FOUND
            - PASS_NOT_FOUND
            - TEMPLATE_NOT_FOUND
            - WEBHOOK_NOT_FOUND
            - NOTIFICATION_NOT_FOUND
            - CONFLICT
            - VERSION_CONFLICT
            - DUPLICATE_PASS
            - IDEMPOTENCY_CONFLICT
            - TEMPLATE_VERSION_NOT_NEWER
            - SCAN_REVERSAL_WINDOW_EXPIRED
            - WEBHOOK_MANAGED_EXTERNALLY
            - PASS_ALREADY_ISSUED
            - PASS_ALREADY_VOIDED
            - PASS_NOT_ISSUED
            - PASS_ISSUING_FAILED
            - APPLE_SIGNING_FAILED
            - APPLE_APNS_FAILED
            - GOOGLE_API_FAILED
            - GOOGLE_JWT_FAILED
            - PROVIDER_UNAVAILABLE
            - LINK_EXPIRED
            - LINK_REVOKED
            - LINK_INVALID
            - TOKEN_SIGNATURE_INVALID
            - TOKEN_CLOCK_SKEW
            - RATE_LIMITED
            - TOO_MANY_REQUESTS
            - INTERNAL_ERROR
            - SERVICE_UNAVAILABLE
            - JOB_FAILED
          description: Machine-readable error code
        message:
          type: string
          description: Human-readable error message
        correlationId:
          type: string
          description: Request correlation ID for debugging
        details:
          description: Additional error details
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - errorCode
        - message
        - correlationId
      additionalProperties: false
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: plt_<secret>
      description: >-
        Passlet access token (`plt_*`) sent as `Authorization: Bearer <token>`
        or `X-API-Key`. Authorized scopes are listed per operation under
        `x-required-scopes`.

````