Create a course

POST/v1/sites/{siteId}/courses

Adds a course to a site. The response is the course, with the code to use from then on.

Needs Catalogue: writeChanges live data

Path

• siteIdrequired

  The site, from GET /v1/sites.

  string

Headers

• Authorizationrequired

  An API key from Automation > Access in the Dnero portal, sent as Authorization: Bearer <key>.

  string

• Idempotency-Key

  A value you choose, unique to what this request creates: a UUID, or your own id for it. Sending it again with the same body returns the first response and creates nothing more. Required.

  string · at most 255 characters

Body

• namerequired

  The course's name.

  string · 1–200 characters

• active

  False to create it retired. Defaults to true.

  boolean

• holdByDefault

  Hold this course on the kitchen screens until it is fired. Defaults to false.

  boolean

Responses

• 201Created
• 400Bad Requestbad_requestinvalid_cursoridempotency_key_required
• 401Unauthorizedmissing_keyinvalid_keykey_expired+1 more
• 403Forbiddenkey_revokedassistant_keykey_without_access+7 more
• 404Not Foundsite_not_foundnot_found
• 409Conflictidempotency_key_reusedrequest_in_progress
• 422Unprocessable Entityinvalid_requestnot_a_modifier_group
• 429Too Many Requestsrate_limited
• 500Internal Server Errorserver_error
• 502Bad Gatewayupstream_unavailable

201 Created

• activerequired

  False for a retired course.

  boolean

• coderequired

  The course's code.

  string

• holdByDefaultrequired

  Whether the kitchen holds this course until it is fired, rather than starting it on arrival.

  boolean

• namerequired

  The course's name.

  string

• orderrequired

  Where the course comes, lowest first.

  integer

• updatedAt

  When the course last changed.

  string · date-time

curlJavaScriptPython

curl -X POST "https://api.dev.dnerohq.com/v1/sites/{siteId}/courses" \
  -H "Authorization: Bearer $DNERO_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Mains"
}'

const response = await fetch('https://api.dev.dnerohq.com/v1/sites/{siteId}/courses', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.DNERO_API_KEY}`,
    'Idempotency-Key': crypto.randomUUID(),
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "name": "Mains"
  }),
})
const data = await response.json()

import os, uuid
import requests

response = requests.post(
    "https://api.dev.dnerohq.com/v1/sites/{siteId}/courses",
    headers={"Authorization": f"Bearer {os.environ['DNERO_API_KEY']}", "Idempotency-Key": str(uuid.uuid4())},
    json={
      "name": "Mains"
    },
)
data = response.json()

201Createdapplication/json

{
  "active": true,
  "code": "5c2e8a41-0b7f-4d6a-8e93-1f4c7b2d9a60",
  "holdByDefault": false,
  "name": "Mains",
  "order": 2,
  "updatedAt": "2026-10-20T03:15:00Z"
}

400Bad Requestapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#bad_request",
  "title": "Bad Request",
  "status": 400,
  "detail": "The request could not be read, for example malformed JSON.",
  "code": "bad_request"
}

401Unauthorizedapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#missing_key",
  "title": "Unauthorized",
  "status": 401,
  "detail": "No API key was sent.",
  "code": "missing_key"
}

403Forbiddenapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#key_revoked",
  "title": "Forbidden",
  "status": 403,
  "detail": "The key was revoked or switched off in the Dnero portal.",
  "code": "key_revoked"
}

404Not Foundapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#site_not_found",
  "title": "Not Found",
  "status": 404,
  "detail": "The key does not reach that site, or there is no such site.",
  "code": "site_not_found"
}

409Conflictapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#idempotency_key_reused",
  "title": "Conflict",
  "status": 409,
  "detail": "This `Idempotency-Key` was already used for a different request.",
  "code": "idempotency_key_reused"
}

422Unprocessable Entityapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#invalid_request",
  "title": "Unprocessable Entity",
  "status": 422,
  "detail": "The request was read but is not valid.",
  "code": "invalid_request"
}

429Too Many Requestsapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "detail": "The key has used its requests for this minute.",
  "code": "rate_limited"
}

500Internal Server Errorapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#server_error",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "Something went wrong on Dnero's side. It has been logged.",
  "code": "server_error"
}

502Bad Gatewayapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#upstream_unavailable",
  "title": "Bad Gateway",
  "status": 502,
  "detail": "Something Dnero depends on did not answer in time.",
  "code": "upstream_unavailable"
}

Examples use this site's API host. Keep the key in $DNERO_API_KEY; never paste it into code.