> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.lettbestilt.no/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.lettbestilt.no/_mcp/server. # Create a delivery zone POST https://www.lettbestilt.no/api/v1/partner/restaurants/{slug}/delivery-zones Content-Type: application/json **Partner key + restaurant key.** A zone by postal codes (`POSTAL_CODES`) or by radius (`RADIUS`). Amounts are integers in øre (0–10000000). The name is trimmed. A `POSTAL_CODES` zone needs at least one postal code (four digits); a `RADIUS` zone needs `centerLat`, `centerLng` and `radiusKm` (above 0, at most 100 km). On create and on change alike, fields with a value that belong to the other zone type (postal codes on a `RADIUS` zone, centre and radius on a `POSTAL_CODES` zone) are rejected with 422; `null` and an empty list are accepted and stored as empty. Unknown fields are rejected. At most 50 zones per restaurant (including inactive ones). Delivery at checkout also needs the restaurant to offer delivery (`deliveryEnabled` in the settings). Reference: https://docs.lettbestilt.no/api-reference/partner/create-partner-delivery-zone ## Authentication - `Authorization` header (bearer token, required) — The partner key (`lbp_test_…` or `lbp_live_…`), sent as `Authorization: Bearer lbp_…` and created in LettBestilt Partner under **Partner key**. It belongs to the whole partner, not to a restaurant, and only works against `/api/v1/partner`. Server to server only: a request with an `Origin` header is rejected with `403 FORBIDDEN`, and the key must never be in a browser. A TEST key sees and creates only sandboxes; LIVE keys work once LettBestilt Partner is open. A suspended or archived partner, a revoked key and a restaurant key (`lbs_…`) here give `401 UNAUTHORIZED`; an expired key gives `401 KEY_EXPIRED`. - `X-LettBestilt-Restaurant-Key` header (required) — The restaurant's own key (`lbs_test_…` or `lbs_live_…`) for calls about one restaurant in the partner API, sent together with the partner key. The key must have full access (scope `*`, otherwise `403 INSUFFICIENT_SCOPE`), belong to a restaurant the partner owns and be in the same environment as the partner key. A restaurant that does not exist, belongs to another partner or does not match the key always gives the same `404 RESTAURANT_NOT_FOUND`. Older keys without an environment in the prefix (`lbs_`) are not accepted here; rotate them in LettBestilt Partner. ## Request ### Path parameters - `slug` (string, required) — The restaurant's slug. It must match the restaurant key in `X-LettBestilt-Restaurant-Key`. ### Body (application/json) This endpoint expects a PartnerDeliveryZoneCreate. - `name` (string, required) - `deliveryFee` (integer, required) - `type` (enum, optional, default: POSTAL_CODES) - Allowed values: `POSTAL_CODES`, `RADIUS` - `postalCodes` (list of string, optional, default: []) - `centerLat` (double, optional, nullable) - `centerLng` (double, optional, nullable) - `radiusKm` (double, optional, nullable) - `centerLabel` (string, optional, nullable) - `minimumOrder` (integer, optional, default: 0) - `estimatedMinutes` (integer, optional, default: 30) - `isActive` (boolean, optional, default: true) ## Response ### 201 Created. - `data` (PartnerDeliveryZone, required) — A delivery zone. Active zones are also in `deliveryZones` in `GET /api/v1/menu`, and a delivery order must fall within an active zone. ## Errors ### 400 Bad Request Error `INVALID_JSON`. - `error` (ErrorBody, required) ### 401 Unauthorized Error `UNAUTHORIZED`: a key is missing, invalid or revoked, the two keys are from different environments (TEST and LIVE), or the partner is suspended or archived. `KEY_EXPIRED`: a key is past its expiry date. - `error` (ErrorBody, required) ### 403 Forbidden Error `FORBIDDEN`: the request has an `Origin` header (server to server only). `PARTNER_AGREEMENT_REQUIRED`: a LIVE key, but the partner agreements are not signed. `PARTNER_NOT_APPROVED`: LettBestilt has not approved the partner yet (all keys). `INSUFFICIENT_SCOPE`: the restaurant key does not have full access (`error.details.requiredScope` is `"*"`). - `error` (ErrorBody, required) ### 404 Not Found Error `RESTAURANT_NOT_FOUND`: the same response whether the slug does not exist, belongs to another partner or does not match the restaurant key. - `error` (ErrorBody, required) ### 409 Conflict Error `RESTAURANT_ARCHIVED` (the restaurant is archived), `DEMO_RESTAURANT` (the demo restaurant cannot be changed through the API) or `DELIVERY_ZONE_LIMIT` (at most 50 zones). - `error` (ErrorBody, required) ### 422 Unprocessable Entity Error `VALIDATION_FAILED` with `error.details.issues` (`path` and `message` per field): e.g. an unknown field, an invalid postal code or amount, a `POSTAL_CODES` zone without postal codes, or a `RADIUS` zone without a centre or radius. - `error` (ErrorBody, required) ### 429 Too Many Requests Error `RATE_LIMITED`: more than 120 calls per minute for this partner key, or more than 600 per minute for the partner across all its keys (reads and writes). Writes also share a bucket of 30 changes per minute per partner and environment. See `Retry-After`. - `error` (ErrorBody, required) ## Types ### PartnerDeliveryZone A delivery zone. Active zones are also in `deliveryZones` in `GET /api/v1/menu`, and a delivery order must fall within an active zone. - `id` (string, required) - `name` (string, required) - `type` (enum, required) - Allowed values: `POSTAL_CODES`, `RADIUS` - `postalCodes` (list of string, required) — Empty for `RADIUS`. - `centerLat` (double, required, nullable) — `null` for `POSTAL_CODES`. - `centerLng` (double, required, nullable) — `null` for `POSTAL_CODES`. - `radiusKm` (double, required, nullable) — `null` for `POSTAL_CODES`. - `centerLabel` (string, required, nullable) — The address the centre was chosen from, for display only. - `deliveryFee` (integer, required) — Delivery fee in øre. - `minimumOrder` (integer, required) — Minimum order in øre. - `estimatedMinutes` (integer, required) — Approximate delivery time in minutes. - `isActive` (boolean, required) — Only active zones are used at checkout. - `textCleaned` (integer, optional) — Only in the response to a write, and only when something was cleaned: the number of fields (`name`, `centerLabel`) where links, email addresses, HTML, `javascript:` or invisible direction marks were removed (as for the menu). ### ErrorBody - `code` (enum, required) — A machine-readable error code. - Allowed values: `MISSING_SLUG`, `MISSING_TOKEN`, `INVALID_JSON`, `INVALID_SUCCESS_URL`, `INVALID_CANCEL_URL`, `VALIDATION_FAILED`, `RESTAURANT_NOT_FOUND`, `ORDER_NOT_FOUND`, `RATE_LIMITED`, `BAD_REQUEST`, `UNAUTHORIZED`, `FORBIDDEN`, `INSUFFICIENT_SCOPE`, `KEY_EXPIRED`, `POPUP_NOT_AVAILABLE`, `PRICE_CHANGED`, `PAYMENT_INCOMPLETE`, `PAYMENT_PENDING`, `PAYMENT_PROVIDER_INVALID`, `FULFILLMENT_NOT_ALLOWED`, `IDEMPOTENCY_CONFLICT`, `DINE_IN_DISABLED`, `PARTY_TOO_LARGE`, `TOO_EARLY`, `NO_TABLE`, `INVALID_PARTY_SIZE`, `INTERNAL_ERROR`, `PARTNER_AGREEMENT_REQUIRED`, `IDEMPOTENCY_KEY_REQUIRED`, `SLUG_TAKEN`, `SANDBOX_LIMIT`, `RETENTION`, `RESTAURANT_ARCHIVED`, `KEY_NOT_FOUND`, `KEY_IN_USE`, `WEBHOOK_NOT_FOUND`, `WEBHOOK_LIMIT`, `CHANGED`, `PDF_TOO_LARGE`, `PDF_INVALID`, `PDF_PASSWORD`, `PDF_TOO_MANY_PAGES`, `PDF_NO_TEXT`, `PDF_PARSE_TIMEOUT`, `MENU_IMPORT_EMPTY`, `FILE_UNSUPPORTED`, `IMAGE_HEIC`, `IMAGE_INVALID`, `IMAGE_DIMENSIONS`, `MENU_IMPORT_UNAVAILABLE`, `MENU_IMPORT_AI_LIMIT`, `MENU_IMPORT_TOO_BIG`, `MENU_IMPORT_NOT_FOUND`, `MENU_IMPORT_CLOSED`, `PARTNER_NOT_APPROVED`, `PARTNER_DATA_LOCKED`, `DOMAIN_NOT_FOUND`, `DOMAIN_TAKEN`, `DOMAIN_LIMIT`, `DOMAIN_MANAGED`, `DOMAIN_NOT_VERIFIED`, `OWNER_EXISTS`, `OWNER_EMAIL_NOT_ALLOWED`, `OWNER_INVITE_NOT_FOUND`, `SANDBOX_NOT_SUPPORTED`, `INVITE_SEND_FAILED`, `GO_LIVE_NOT_REQUIRED`, `GO_LIVE_NOT_READY`, `GO_LIVE_CHECKS_FAILED`, `GO_LIVE_ALREADY_REQUESTED`, `GO_LIVE_ALREADY_APPROVED`, `GO_LIVE_NOTHING_TO_WITHDRAW`, `DEMO_RESTAURANT`, `LEGAL_LOCKED`, `HOURS_OVERRIDE_NOT_FOUND`, `HOURS_OVERRIDE_LIMIT`, `DELIVERY_ZONE_NOT_FOUND`, `DELIVERY_ZONE_LIMIT`, `MENU_NOT_FOUND`, `MENU_IS_DEFAULT`, `CATEGORY_NOT_FOUND`, `PRODUCT_NOT_FOUND`, `ADDON_GROUP_NOT_FOUND`, `CATEGORY_NOT_EMPTY`, `CATEGORY_LIMIT`, `PRODUCT_LIMIT`, `ADDON_GROUP_LIMIT`, `KEY_ROLE_FORBIDDEN`, `WHITE_LABEL_REQUIRED`, `LOGO_NOT_ALLOWED`, `FILE_TOO_LARGE`, `UPLOAD_FAILED`, `PARTNER_ARCHIVED`, `PARTNER_NEWS_FORBIDDEN`, `NEWS_NOT_FOUND`, `NOT_DRAFT`, `NOT_PUBLISHED`, `NOT_SCHEDULED`, `NOT_CLAIMABLE`, `NO_RECIPIENTS`, `IMAGE_NOT_ALLOWED`, `SENDER_DOMAIN_ALREADY_SET`, `SENDER_DOMAIN_NOT_SET`, `DOMAIN_EXISTS`, `SENDER_DOMAIN_REJECTED`, `EMAIL_SERVICE_UNAVAILABLE`, `HUMAN_REQUIRED`, `LENGTH_REQUIRED`, `PAYLOAD_TOO_LARGE` - `message` (string, required) — A human-readable explanation, often in Norwegian. For business rules it is usually suitable to show the customer. - `requestId` (string, required) — The same value as the `X-Request-Id` response header. Search for it in the API log in LettBestilt Partner, and include it when you contact LettBestilt. - `details` (any, optional) — Extra data for some codes, for example `issues` for `VALIDATION_FAILED`, the totals for `PRICE_CHANGED` or `requiredScope` for `INSUFFICIENT_SCOPE`. ## Examples **Request** ```json { "name": "Sentrum", "deliveryFee": 4900, "type": "POSTAL_CODES", "postalCodes": [ "3110", "3111" ], "minimumOrder": 20000, "estimatedMinutes": 40 } ``` **Response** ```json { "data": { "id": "string", "name": "string", "type": "POSTAL_CODES", "postalCodes": [ "string" ], "centerLat": 1.1, "centerLng": 1.1, "radiusKm": 1.1, "centerLabel": "string", "deliveryFee": 1, "minimumOrder": 1, "estimatedMinutes": 1, "isActive": true, "textCleaned": 1 } } ``` **SDK Code** ```python Partner_createPartnerDeliveryZone_example import requests url = "https://www.lettbestilt.no/api/v1/partner/restaurants/slug/delivery-zones" payload = { "name": "Sentrum", "deliveryFee": 4900, "type": "POSTAL_CODES", "postalCodes": ["3110", "3111"], "minimumOrder": 20000, "estimatedMinutes": 40 } headers = { "Authorization": "Bearer ", "Content-Type": "application/json" } response = requests.post(url, json=payload, headers=headers) print(response.json()) ``` ```javascript Partner_createPartnerDeliveryZone_example const url = 'https://www.lettbestilt.no/api/v1/partner/restaurants/slug/delivery-zones'; const options = { method: 'POST', headers: {Authorization: 'Bearer ', 'Content-Type': 'application/json'}, body: '{"name":"Sentrum","deliveryFee":4900,"type":"POSTAL_CODES","postalCodes":["3110","3111"],"minimumOrder":20000,"estimatedMinutes":40}' }; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go Partner_createPartnerDeliveryZone_example package main import ( "fmt" "strings" "net/http" "io" ) func main() { url := "https://www.lettbestilt.no/api/v1/partner/restaurants/slug/delivery-zones" payload := strings.NewReader("{\n \"name\": \"Sentrum\",\n \"deliveryFee\": 4900,\n \"type\": \"POSTAL_CODES\",\n \"postalCodes\": [\n \"3110\",\n \"3111\"\n ],\n \"minimumOrder\": 20000,\n \"estimatedMinutes\": 40\n}") req, _ := http.NewRequest("POST", url, payload) req.Header.Add("Authorization", "Bearer ") req.Header.Add("Content-Type", "application/json") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby Partner_createPartnerDeliveryZone_example require 'uri' require 'net/http' url = URI("https://www.lettbestilt.no/api/v1/partner/restaurants/slug/delivery-zones") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Post.new(url) request["Authorization"] = 'Bearer ' request["Content-Type"] = 'application/json' request.body = "{\n \"name\": \"Sentrum\",\n \"deliveryFee\": 4900,\n \"type\": \"POSTAL_CODES\",\n \"postalCodes\": [\n \"3110\",\n \"3111\"\n ],\n \"minimumOrder\": 20000,\n \"estimatedMinutes\": 40\n}" response = http.request(request) puts response.read_body ``` ```java Partner_createPartnerDeliveryZone_example import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.post("https://www.lettbestilt.no/api/v1/partner/restaurants/slug/delivery-zones") .header("Authorization", "Bearer ") .header("Content-Type", "application/json") .body("{\n \"name\": \"Sentrum\",\n \"deliveryFee\": 4900,\n \"type\": \"POSTAL_CODES\",\n \"postalCodes\": [\n \"3110\",\n \"3111\"\n ],\n \"minimumOrder\": 20000,\n \"estimatedMinutes\": 40\n}") .asString(); ``` ```php Partner_createPartnerDeliveryZone_example request('POST', 'https://www.lettbestilt.no/api/v1/partner/restaurants/slug/delivery-zones', [ 'body' => '{ "name": "Sentrum", "deliveryFee": 4900, "type": "POSTAL_CODES", "postalCodes": [ "3110", "3111" ], "minimumOrder": 20000, "estimatedMinutes": 40 }', 'headers' => [ 'Authorization' => 'Bearer ', 'Content-Type' => 'application/json', ], ]); echo $response->getBody(); ``` ```csharp Partner_createPartnerDeliveryZone_example using RestSharp; var client = new RestClient("https://www.lettbestilt.no/api/v1/partner/restaurants/slug/delivery-zones"); var request = new RestRequest(Method.POST); request.AddHeader("Authorization", "Bearer "); request.AddHeader("Content-Type", "application/json"); request.AddParameter("application/json", "{\n \"name\": \"Sentrum\",\n \"deliveryFee\": 4900,\n \"type\": \"POSTAL_CODES\",\n \"postalCodes\": [\n \"3110\",\n \"3111\"\n ],\n \"minimumOrder\": 20000,\n \"estimatedMinutes\": 40\n}", ParameterType.RequestBody); IRestResponse response = client.Execute(request); ``` ```swift Partner_createPartnerDeliveryZone_example import Foundation let headers = [ "Authorization": "Bearer ", "Content-Type": "application/json" ] let parameters = [ "name": "Sentrum", "deliveryFee": 4900, "type": "POSTAL_CODES", "postalCodes": ["3110", "3111"], "minimumOrder": 20000, "estimatedMinutes": 40 ] as [String : Any] let postData = JSONSerialization.data(withJSONObject: parameters, options: []) let request = NSMutableURLRequest(url: NSURL(string: "https://www.lettbestilt.no/api/v1/partner/restaurants/slug/delivery-zones")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "POST" request.allHTTPHeaderFields = headers request.httpBody = postData as Data let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```