Get Order Barcode

API Overview

Looks up the WMG tracking number assigned to a parcel using your original order reference (custom tracking number). Use this endpoint to retrieve the WMG barcode when you only have your internal reference on hand.

Request Information

• Method: GET
• Path: /openapi/order/get-barcode
• Authentication: Standard OpenAPI token (MD5-based)

Request Headers

Field	Description
Content-Type	application/json
x-auth-name	$API_NAME
x-auth-seed	$SEED (13-digit millisecond Unix timestamp)
x-auth-token	$TOKEN (MD5 hash)

Request Parameters

Parameter	Type	Required	Description
custom_tracking_num	string	Yes	The internal order reference used when creating the order

Token Generation Example

The authentication token is computed from your credentials and seed only -- request parameters are not included.

seed  = "1746700000000"   (13-digit ms timestamp)
token = md5( strtolower(api_name) + api_key + seed )

Authentication

This endpoint uses Standard OpenAPI Authentication (MD5 token).

For complete authentication instructions and code examples, see Authentication Guide.

Response Information

The response is in JSON format.

Response Format

Field	Type	Description
code	integer	Result code. 0 = success, 1 = failure
message	string	Result description
data	object	Response payload

Success Response

• Status Code: 200
• Response Body:

{
    "code": 0,
    "message": "success",
    "data": {
        "barcode": "WGC000000000044"
    }
}

Field	Type	Description
data.barcode	string	WMG-assigned tracking number for the given custom reference

Error Response

• Status Code: 200 (business logic error) or 4xx/5xx (system error)
• Response Body:

{
    "code": 1,
    "message": "Order Not Found!",
    "data": []
}

Common errors:

• Authentication failure → code 1; the message depends on the cause (e.g. x-auth-token: INVALID, x-auth-seed: TIMEOUT) — see signature.md
• Order not found -- code 1, message Order Not Found!

Code Reference

Code	Description
0	Success
1	Failure

Example

Bash

API_NAME="your_api_name"
API_KEY="your_api_key"
SEED=$(date +%s%3N)
TOKEN=$(printf '%s' "$(echo -n "$API_NAME" | tr '[:upper:]' '[:lower:]')${API_KEY}${SEED}" | md5sum | cut -d' ' -f1)

curl -G "https://api.test.wmgdelivery.com/v1/openapi/order/get-barcode" \
  --data-urlencode "custom_tracking_num=ORDER-20260501-001" \
  -H "x-auth-name: $API_NAME" \
  -H "x-auth-seed: $SEED" \
  -H "x-auth-token: $TOKEN"

Windows PowerShell

$API_NAME = "your_api_name"
$API_KEY  = "your_api_key"
$SEED     = [string]([DateTimeOffset]::UtcNow.ToUnixTimeMilliseconds())

$raw   = [System.Text.Encoding]::UTF8.GetBytes($API_NAME.ToLower() + $API_KEY + $SEED)
$md5   = [System.Security.Cryptography.MD5]::Create().ComputeHash($raw)
$TOKEN = -join ($md5 | ForEach-Object { $_.ToString("x2") })

$headers = @{
    "x-auth-name"  = $API_NAME
    "x-auth-seed"  = $SEED
    "x-auth-token" = $TOKEN
}

$response = Invoke-RestMethod `
    -Uri "https://api.test.wmgdelivery.com/v1/openapi/order/get-barcode?custom_tracking_num=ORDER-20260501-001" `
    -Method Get -Headers $headers
$response | ConvertTo-Json -Depth 10

Python

import hashlib, time
import requests

API_NAME = 'your_api_name'
API_KEY  = 'your_api_key'
SEED     = str(int(time.time() * 1000))
TOKEN    = hashlib.md5((API_NAME.lower() + API_KEY + SEED).encode()).hexdigest()

headers = {
    'x-auth-name':  API_NAME,
    'x-auth-seed':  SEED,
    'x-auth-token': TOKEN,
}

resp = requests.get(
    'https://api.test.wmgdelivery.com/v1/openapi/order/get-barcode',
    params={'custom_tracking_num': 'ORDER-20260501-001'},
    headers=headers,
)
print(resp.json())

Node.js / TypeScript

import crypto from 'node:crypto';

const API_NAME = 'your_api_name';
const API_KEY  = 'your_api_key';
const SEED     = String(Date.now());
const TOKEN    = crypto.createHash('md5').update(API_NAME.toLowerCase() + API_KEY + SEED).digest('hex');

const url = new URL('https://api.test.wmgdelivery.com/v1/openapi/order/get-barcode');
url.searchParams.set('custom_tracking_num', 'ORDER-20260501-001');

const resp = await fetch(url.toString(), {
    headers: {
        'x-auth-name':  API_NAME,
        'x-auth-seed':  SEED,
        'x-auth-token': TOKEN,
    },
});
console.log(JSON.stringify(await resp.json(), null, 2));

PHP

<?php
$API_NAME = 'your_api_name';
$API_KEY  = 'your_api_key';
$SEED     = (string)(time() * 1000);
$TOKEN    = md5(strtolower($API_NAME) . $API_KEY . $SEED);

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://api.test.wmgdelivery.com/v1/openapi/order/get-barcode?' . http_build_query(['custom_tracking_num' => 'ORDER-20260501-001']));
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'x-auth-name: '  . $API_NAME,
    'x-auth-seed: '  . $SEED,
    'x-auth-token: ' . $TOKEN,
]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_TIMEOUT, 10);
$response = curl_exec($ch);
curl_close($ch);
echo json_encode(json_decode($response, true), JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE) . "\n";
?>

Notes

• The custom_tracking_num must match exactly the value submitted during order creation.
• The authentication token does not include request parameters; only credentials and seed are used.
• The seed must be a 13-digit millisecond Unix timestamp and within ±10 minutes of server time.
• All parameters are case-sensitive.

Error Codes

code	message	Description
1	Authentication error message	Authentication failed; the returned message depends on the cause — see the full list in signature.md
1	Order Not Found!	No order exists for the given custom_tracking_num under this client