Preferred Opaque-token Route

This public endpoint returns customer-safe shipment tracking data for a random shipment-specific token. It is limited to 30 requests per minute and is the only route new customer links should use. It returns 404 while the merchant has hosted tracking disabled.

Legacy Tracking-number Route

The legacy route is retained for already-issued links. Tracking numbers are more enumerable, so this endpoint is limited to 15 requests per minute and returns no shipment when the same number is ambiguous across merchants.

Responses

Both routes return { success: true, data: ... } when found and a 404 Tracking information not found response otherwise. They require no merchant JWT and expose only the public projection.