Quick Start

Register or sign in, obtain JWT access and refresh tokens, and make your first merchant-scoped REST API request.

1. Register

POST/api/v1/auth/register
curl -X POST https://api.ordertrackify.com/api/v1/auth/register \
  -H "Content-Type: application/json" \
  -d '{"name":"Example Merchant","email":"[email protected]","password":"securepassword","timezone":"Australia/Brisbane"}'

The response contains accessToken and refreshToken. Access tokens expire after 15 minutes; refresh tokens are valid for seven days.

2. Call an Authenticated Endpoint

GET/api/v1/shipments?limit=10
curl "https://api.ordertrackify.com/api/v1/shipments?limit=10" \
  -H "Authorization: Bearer ACCESS_TOKEN"

3. Refresh the Session

POST/api/v1/auth/refresh
curl -X POST https://api.ordertrackify.com/api/v1/auth/refresh \
  -H "Content-Type: application/json" \
  -d '{"refreshToken":"REFRESH_TOKEN"}'
Authentication types: Merchant REST endpoints use JWT bearer tokens. WooCommerce plugin endpoints use a store-bound plugin key or HMAC, Shopify webhooks use platform HMAC signatures, and public tracking/carrier endpoints are separately rate limited. Wix webhook signature compatibility remains a documented production blocker.