Skip to main content
The External API is the machine-to-machine surface of DropHub. A merchant system authenticates as an OAuth client, quotes and creates shipments, follows them through their lifecycle, and receives signed webhook events as they happen.

Sandbox quickstart

Register a sandbox merchant and reach a shipment-ready state.

Authentication

Client credentials, scopes, and token lifecycle.

Shipments

Quote, create, list, and retrieve shipments.

Webhooks

Subscribe to events and verify their signatures.

​
What the surface covers

Every operation below lives under /v2/external and is authorised with an OAuth 2.0 client-credentials token.

​
Conventions

Idempotency and ETags

Safe retries on writes, and optimistic concurrency on updates.

Errors

RFC 9457 problem details with stable machine codes.
Responses are JSON. Errors are application/problem+json. Collections are cursor-paginated and bounded. Timestamps are UTC and ISO 8601. Money is an exact decimal with an explicit currency — never a floating-point number.