---
title: "Look up an order's status for a shopper"
method: GET
path: "/tracking"
tags: ["Tracking"]
---

# Look up an order's status for a shopper

`GET /tracking`

## Request

- Base URL: `https://sitesplaced.com/api/v1`
- URL: `https://sitesplaced.com/api/v1/tracking`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-Api-Key`

Secret or publishable key. Permission `tracking:read`. Never returns a name, phone, email or address. An order copied in from another platform needs `contact`, because those order numbers are sequential and easy to guess. Missing `contact` gives 422 with `param: "contact"`; a wrong one gives 422; five wrong tries give 429 for 15 minutes.

## Query parameters

- `order` string, required
- `contact` string

## Response `200`

The order's status.

- TrackingResult
  - `order` TrackingOrder, required: Never contains a name, phone, email or address.
    - `order_number` string
    - `status` 'pending' | 'confirmed' | 'shipped' | 'out_for_delivery' | 'completed' | 'cancelled': `completed` means delivered.
    - `items` object[]
    - `total_amount` number
    - `shipping_fee` number, nullable
    - `cod_fee` number, nullable
    - `currency` string
    - `tracking_link` string, nullable
    - `status_comment` string, nullable
    - `shipping_awb` string, nullable
    - `shipping_courier` string, nullable
    - `shipping_status_text` string, nullable
    - `status_history` object[]
    - `created_at` string, date-time: ISO 8601, in UTC.
    - `updated_at` string, date-time: ISO 8601, in UTC.
  - `store` object, required
    - `name` string, required

## Other responses

- `400`: `invalid_request`. The request is malformed or a field has a bad value; `param` names the field.
- `401`: `unauthorized`. The key is missing, wrong or revoked.
- `403`: `forbidden`. The key may not do this: a secret key sent from a browser, a publishable key from a website not on its list, the wrong kind of key, or a missing permission.
- `404`: `not_found`.
- `422`: `unprocessable`.
- `429`: `rate_limited`. Wait for `Retry-After` seconds.
- `500`: `internal_error`.
- `503`: `unavailable`.

---

[API](https://skmtc.dev/sitesplaced/apis/sitesplaced-developer-api.md) · [All operations](https://skmtc.dev/sitesplaced/apis/sitesplaced-developer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sitesplaced/apis/sitesplaced-developer-api/revisions/66fbfbbaad1a?raw)