SwiftGo Business API

curl https://api.swiftgogh.com/api/business/v1/ping \
  -H "Authorization: Bearer sk_test_..."

# 2 · Book a delivery
curl -X POST https://api.swiftgogh.com/api/business/v1/deliveries \
  -H "Authorization: Bearer sk_test_..." \
  -H "Idempotency-Key: order-1001" \
  -H "Content-Type: application/json" \
  -d '{
    "external_reference": "1001",
    "pickup":  { "latitude": 5.5570, "longitude": -0.1830,
                 "address": "12 Oxford St, Osu",
                 "contact": { "name": "Ama Shoes", "phone": "0241234567" } },
    "dropoff": { "latitude": 5.6395, "longitude": -0.1530,
                 "address": "East Legon", "landmark": "Near A&C Mall",
                 "contact": { "name": "Kofi Mensah", "phone": "0551234567" },
                 "instructions": "Call on arrival" },
    "package": { "description": "Shoes (1 box)", "size": "small", "value": 250 }
  }'

// 2 · Book a delivery (Node 18+, built-in fetch)
const res = await fetch('https://api.swiftgogh.com/api/business/v1/deliveries', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.SWIFTGO_KEY}`,
    'Idempotency-Key': `order-${order.id}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    external_reference: String(order.id),
    pickup:  { latitude: 5.5570, longitude: -0.1830, address: '12 Oxford St, Osu',
               contact: { name: 'Ama Shoes', phone: '0241234567' } },
    dropoff: { latitude: 5.6395, longitude: -0.1530, address: 'East Legon',
               contact: { name: 'Kofi Mensah', phone: '0551234567' } },
    package: { description: 'Shoes (1 box)', size: 'small', value: 250 },
  }),
});
const delivery = await res.json();
if (!res.ok) throw new Error(delivery.error.code); // e.g. OUT_OF_COVERAGE
console.log(delivery.id, delivery.status, delivery.price.amount);

// 2 · Book a delivery (PHP + cURL)
$ch = curl_init('https://api.swiftgogh.com/api/business/v1/deliveries');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer ' . getenv('SWIFTGO_KEY'),
        'Idempotency-Key: order-' . $order['id'],
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode([
        'external_reference' => (string) $order['id'],
        'pickup'  => ['latitude' => 5.5570, 'longitude' => -0.1830, 'address' => '12 Oxford St, Osu',
                      'contact' => ['name' => 'Ama Shoes', 'phone' => '0241234567']],
        'dropoff' => ['latitude' => 5.6395, 'longitude' => -0.1530, 'address' => 'East Legon',
                      'contact' => ['name' => 'Kofi Mensah', 'phone' => '0551234567']],
        'package' => ['description' => 'Shoes (1 box)', 'size' => 'small', 'value' => 250],
    ]),
]);
$delivery = json_decode(curl_exec($ch), true);

{ "pickup":  { "latitude": 5.5570, "longitude": -0.1830 },
  "dropoff": { "latitude": 5.6395, "longitude": -0.1530 } }

{
  "id": "qt_01jcx7k8f9m2r3t4v5w6x7y8z9",
  "object": "quote",
  "livemode": false,
  "price": { "amount": 31.5, "delivery_fee": 26.5, "service_fee": 5.0, "currency": "GHS" },
  "distance_km": 9.8,
  "eta_minutes": 38,
  "zone": { "name": "Accra Central" },
  "expires_at": "2026-11-12T10:15:00Z",
  "used": false
}

{
  "id": "del_01jcx9p2q3r4s5t6v7w8x9y0z1",
  "object": "delivery",
  "livemode": true,
  "status": "rider_assigned",
  "external_reference": "1001",
  "order_number": "SG-20261112-04512",
  "price": { "amount": 31.5, "delivery_fee": 26.5, "service_fee": 5.0, "currency": "GHS" },
  "distance_km": 9.8,
  "pickup":  { "latitude": 5.557, "longitude": -0.183, "address": "12 Oxford St, Osu",
               "contact": { "name": "Ama Shoes", "phone": "+233241234567" } },
  "dropoff": { "latitude": 5.6395, "longitude": -0.153, "address": "East Legon",
               "contact": { "name": "Kofi Mensah", "phone": "+233551234567" } },
  "package": { "description": "Shoes (1 box)", "size": "small", "value": 250, "quantity": 1, "fragile": false },
  "rider": { "name": "Yaw M.", "phone": "+233...", "photo_url": "...",
             "vehicle_type": "motorbike", "vehicle_plate": "GT 1234-24" },
  "tracking_url": "https://swiftgogh.com/t/...",
  "eta": { "dropoff_at": "2026-11-12T10:41:00Z" },
  "proof_of_delivery": null,
  "cancellation": null,
  "timeline": [ { "status": "pending", "at": "2026-11-12T10:02:11Z" },
                { "status": "rider_assigned", "at": "2026-11-12T10:04:37Z" } ],
  "metadata": { "platform_order": "1001" },
  "created_at": "2026-11-12T10:02:11Z",
  "updated_at": "2026-11-12T10:04:37Z"
}

curl -X PUT https://api.swiftgogh.com/api/business/v1/webhook-endpoint \
  -H "Authorization: Bearer sk_test_..." -H "Content-Type: application/json" \
  -d '{"url": "https://yourshop.com/swiftgo/webhooks"}'

POST https://yourshop.com/swiftgo/webhooks
SwiftGo-Signature: t=1762942951,v1=5f2c…
SwiftGo-Event-Type: delivery.picked_up
SwiftGo-Event-Id: evt_01jcxa…

{ "id": "evt_01jcxa…", "object": "event", "type": "delivery.picked_up", "livemode": true,
  "created_at": "2026-11-12T10:22:31Z",
  "data": { "object": { …the delivery object… } } }

const crypto = require('crypto');

app.post('/swiftgo/webhooks', express.raw({ type: 'application/json' }), (req, res) => {
  const header = req.get('SwiftGo-Signature') || '';
  const parts = Object.fromEntries(header.split(',').map((p) => p.split('=')));
  const expected = crypto.createHmac('sha256', process.env.SWIFTGO_WEBHOOK_SECRET)
    .update(`${parts.t}.${req.body}`).digest('hex');
  const fresh = Math.abs(Date.now() / 1000 - Number(parts.t)) < 300;
  if (!fresh || !parts.v1 || parts.v1.length !== expected.length ||
      !crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(parts.v1))) {
    return res.sendStatus(400);
  }
  const event = JSON.parse(req.body);
  // update your order using event.data.object.status
  res.sendStatus(200);
});

$body = file_get_contents('php://input');
parse_str(str_replace(',', '&', $_SERVER['HTTP_SWIFTGO_SIGNATURE'] ?? ''), $sig);
$expected = hash_hmac('sha256', ($sig['t'] ?? '') . '.' . $body, getenv('SWIFTGO_WEBHOOK_SECRET'));

if (abs(time() - (int) ($sig['t'] ?? 0)) > 300 || ! hash_equals($expected, $sig['v1'] ?? '')) {
    http_response_code(400);
    exit;
}
$event = json_decode($body, true);
// update your order using $event['data']['object']['status']
http_response_code(200);

{ "error": { "type": "invalid_request_error",
             "code": "QUOTE_EXPIRED",
             "message": "This quote has expired. Get a new quote.",
             "errors": { "quote_id": ["This quote has expired. Get a new quote."] } },
  "request_id": "req_01jcxb…" }