POST

Rooms.Add

Create a room/resource in The route mirrors the old app_resource_save whitelist, scopes the row to the active owner, runs rooms.created automation, and emits realtime rooms.created.

Permissions

User must be logged in with a valid bearer token.
The user must be from the same company domain as the request Host (call the API on that account subdomain or allowed custom domain). A token from another company returns success=0, error user_not_in_company.
Returned or changed records are limited by the user permissions, team access, folder access, and account settings.

Action

Creates a Rooms record or sends the requested data after validation.

Push Service

Pushes event rooms.created to users who should see this change.

Automation

Runs automation event rooms.created with the record id and submitted parameters after the action succeeds.

Special Instructions

Send the bearer token on protected calls with Authorization: Bearer YOUR TOKEN.
On a company subdomain (e.g. https://{user_domain}.bull36.com) the user must match that Host — Login and protected APIs reject another company with success=0, error user_not_in_company. On a main brand host (bull36.com, biz1.co.il, mastrocrm.com, …) the company domain gate is skipped.
Send parameters as POST body fields exactly as documented.
Send date/time values in UTC Y-m-d H:i:s format when a date or datetime field is used.

Required Parameters

Name	Type	Sample	Explanation
`name` post	string	`Room A`	Room name. You may also use room_name when that field exists.

Optional Parameters

Name	Type	Sample	What it gives
`room_name` post	string	`Room A`	Alternate room name field when used by the account.
`description` post	string	`Main meeting room`	Short room description.
`city` post	string	`Tel Aviv`	Room city.
`area` post	string	`Center`	Room area.
`price` post	number	`150.00`	Room price when stored.
`max_guest` post	int	`8`	Maximum guests/capacity when stored.
`status` post	int	`1`	Sets active/inactive status when stored.

Authentication

Send the bearer token returned by Login in the request header. The user must be from the same company domain as this Host — a token from another company is rejected (user_not_in_company).

Authorization: Bearer YOUR TOKEN

Sample Request

{
    "url": "\/app\/Rooms.Add",
    "method": "POST",
    "headers": {
        "Authorization": "Bearer YOUR TOKEN"
    },
    "body": {
        "name": "Room A",
        "city": "Tel Aviv"
    },
    "url_user": "https:\/\/{user}.bull36.com\/app\/Rooms.Add",
    "url_domain": "https:\/\/{domain}\/app\/Rooms.Add"
}

Endpoint

POST /app/Rooms.Add
POST https://{user}.bull36.com/app/Rooms.Add
POST https://{domain}/app/Rooms.Add

Sample Output

{
    "success": 1,
    "id": "3710",
    "message": "Record added successfully.",
    "automation_event": "rooms.created",
    "socket_event": "rooms.created"
}

JavaScript Example

const token = 'YOUR TOKEN';
const body = new URLSearchParams({});
// Fill body fields from the Sample Request JSON above.
const res = await fetch('/app/Rooms.Add', { method: 'POST', headers: { Authorization: 'Bearer ' + token }, body });
const data = await res.json();
console.log(data);

Error Example

{
    "success": 0,
    "message": "No supported fields were sent."
}