> ## Documentation Index
> Fetch the complete documentation index at: https://docs.drop-hub.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List the merchant's pickup locations and their collection hours



## OpenAPI

````yaml /openapi.yaml get /api/v2/external/pickup-locations
openapi: 3.1.0
info:
  title: DropHub External API
  version: v2
  description: The public machine-to-machine integration surface of DropHub.
servers:
  - url: https://api-test.drop-hub.com
    description: Sandbox. Isolated data and credentials.
  - url: https://api.drop-hub.com
    description: Production. Production credentials only.
security: []
tags:
  - name: Authentication
    description: >-
      Authentication, sessions, the company a principal is, and merchant API
      credentials
  - name: External Shipments
    description: OAuth-scoped Merchant shipment creation, lookup, and cancellation
  - name: External Tracking
    description: Merchant-authenticated and privacy-minimized public tracking projections
  - name: External Webhooks
  - name: Sandbox
    description: >-
      Tenant-bound self-service fixture lifecycle, available only on the
      isolated sandbox deployment
paths:
  /api/v2/external/pickup-locations:
    get:
      tags:
        - External Shipments
      summary: List the merchant's pickup locations and their collection hours
      operationId: listExternalPickupLocations
      parameters:
        - name: limit
          in: query
          schema:
            type: integer
            minimum: 1
            maximum: 100
            default: 25
        - name: cursor
          in: query
          schema:
            type: string
            maxLength: 256
      responses:
        '200':
          description: One page of pickup locations
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExternalPickupLocationPage'
        '401':
          $ref: '#/components/responses/AuthenticationFailed'
        '403':
          $ref: '#/components/responses/AccessDenied'
      security:
        - oauthClientCredentials:
            - shipments:read
components:
  schemas:
    ExternalPickupLocationPage:
      type: object
      required:
        - items
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/ExternalPickupLocation'
        nextCursor:
          type:
            - string
            - 'null'
    ExternalPickupLocation:
      type: object
      additionalProperties: false
      required:
        - pickupLocationId
        - merchantId
        - branchId
        - code
        - name
        - latitude
        - longitude
        - status
        - timezone
        - openingHours
        - pickupWaves
      properties:
        pickupLocationId:
          $ref: '#/components/schemas/Uuid'
        merchantId:
          $ref: '#/components/schemas/Uuid'
        branchId:
          $ref: '#/components/schemas/Uuid'
        code:
          type: string
        name:
          type: string
        cityCode:
          type:
            - string
            - 'null'
        latitude:
          $ref: '#/components/schemas/Latitude'
        longitude:
          $ref: '#/components/schemas/Longitude'
        status:
          type: string
          enum:
            - ACTIVE
            - INACTIVE
        timezone:
          type: string
          example: Asia/Riyadh
          description: IANA zone the opening hours are local to.
        openingHours:
          type: array
          description: >-
            Local collection hours per ISO day of week (1 = Monday). Empty means
            no hours are configured.
          items:
            type: object
            additionalProperties: false
            required:
              - dayOfWeek
              - opensAt
              - closesAt
            properties:
              dayOfWeek:
                type: integer
                minimum: 1
                maximum: 7
              opensAt:
                type: string
                example: '08:00:00'
              closesAt:
                type: string
                example: '20:00:00'
        pickupWaves:
          type: array
          items:
            type: object
            additionalProperties: false
            required:
              - waveTime
            properties:
              waveTime:
                type: string
                example: '10:00:00'
              label:
                type:
                  - string
                  - 'null'
    Problem:
      type: object
      description: RFC 9457 Problem Details with stable DropHub extensions
      additionalProperties: true
      required:
        - type
        - title
        - status
        - code
        - timestamp
        - correlationId
        - requestId
      properties:
        type:
          type: string
          format: uri
        title:
          type: string
          maxLength: 128
        status:
          type: integer
          format: int32
          minimum: 400
          maximum: 599
        detail:
          type: string
          maxLength: 512
        instance:
          type: string
          format: uri-reference
        code:
          type: string
          pattern: ^[A-Z][A-Z0-9_]{1,63}$
        timestamp:
          type: string
          format: date-time
        correlationId:
          type: string
          format: uuid
        requestId:
          type: string
          format: uuid
        violations:
          type: array
          maxItems: 20
          items:
            $ref: '#/components/schemas/Violation'
      example:
        type: https://api.drophub.example/problems/access-denied
        title: Access denied
        status: 403
        detail: Access to this resource is denied.
        instance: /api/v2/external/shipments/018f2d8a-1f00-7000-8000-000000000206
        code: ACCESS_DENIED
        timestamp: '2026-08-22T18:30:00Z'
        correlationId: 018f2d8a-1f00-7000-8000-000000000207
        requestId: 018f2d8a-1f00-7000-8000-000000000208
    Uuid:
      type: string
      format: uuid
    Latitude:
      type: number
      minimum: -90
      maximum: 90
      multipleOf: 0.000001
    Longitude:
      type: number
      minimum: -180
      maximum: 180
      multipleOf: 0.000001
    Violation:
      type: object
      additionalProperties: false
      required:
        - field
        - code
        - message
      properties:
        field:
          type: string
          maxLength: 128
        code:
          type: string
          maxLength: 64
        message:
          type: string
          maxLength: 256
  responses:
    AuthenticationFailed:
      description: Authentication failed without account, token, or tenant enumeration.
      headers:
        WWW-Authenticate:
          $ref: '#/components/headers/WwwAuthenticate'
      content:
        application/problem+json:
          schema:
            $ref: '#/components/schemas/Problem'
          example:
            type: https://api.drophub.example/problems/authentication-required
            title: Authentication required
            status: 401
            detail: Authentication is required for this resource.
            instance: /api/v2/external/shipments/018f2d8a-1f00-7000-8000-000000000206
            code: AUTHENTICATION_REQUIRED
            timestamp: '2026-08-22T18:30:00Z'
            correlationId: 018f2d8a-1f00-7000-8000-000000000207
            requestId: 018f2d8a-1f00-7000-8000-000000000208
    AccessDenied:
      description: >-
        Access denied without exposing internal policy or resource ownership. No
        operation requires a second factor or a fresher live session.
      content:
        application/problem+json:
          schema:
            $ref: '#/components/schemas/Problem'
  headers:
    WwwAuthenticate:
      description: Bearer challenge for an unauthenticated or invalid-token request.
      schema:
        type: string
        example: Bearer
  securitySchemes:
    oauthClientCredentials:
      type: oauth2
      description: >-
        OAuth 2.0 client-credentials flow for external machine-to-machine
        integrations.
      flows:
        clientCredentials:
          tokenUrl: /api/v2/oauth/token
          scopes:
            quotes:write: Calculate shipment quotes without creating shipments
            shipments:read: Read Merchant-owned shipments
            shipments:write: Create and cancel Merchant-owned shipments
            tracking:read: Read merchant-owned shipment tracking projections
            webhooks:manage: Configure and rotate the merchant's single signed shipment webhook

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.