const tracker = await pr.trackers.create({
  tracking_number: '9400111899223408065744',
  carrier: 'USPS'
});

const status = await pr.trackers.get(tracker.id);
console.log(status.status); // 'in_transit', 'delivered', etc.
console.log(status.events); // Full chronological event history

{
  "event": "label.created",
  "data": {
    "id": "lbl_8k2m4n6p",
    "carrier": "USPS",
    "service": "Ground Advantage",
    "tracking_number": "9400111899223408065744",
    "rate_cents": 542,
    "label_url": "https://api.packageretriever.com/v1/labels/lbl_8k2m4n6p/download",
    "created_at": "2026-05-16T14:32:00Z"
  },
  "timestamp": "2026-05-16T14:32:01Z"
}

import crypto from 'crypto';

function verifyWebhook(payload: string, signature: string, secret: string): boolean {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(payload)
    .digest('hex');
  return signature === `sha256=${expected}`;
}

// In your handler:
app.post('/webhooks/pr', (req, res) => {
  const payload = JSON.stringify(req.body);
  const signature = req.headers['pr-signature'] as string;

  if (!verifyWebhook(payload, signature, process.env.PR_WEBHOOK_SECRET!)) {
    return res.status(401).send('Invalid signature');
  }

  // Process the event
  const { event, data } = req.body;
  console.log(`Label created: ${data.tracking_number}`);

  res.status(200).send('OK');
});

import hmac
import hashlib

def verify_webhook(payload: bytes, signature: str, secret: str) -> bool:
    expected = hmac.new(
        secret.encode(),
        payload,
        hashlib.sha256
    ).hexdigest()
    return signature == f"sha256={expected}"

const deliveries = await fetch('https://api.packageretriever.com/v1/webhooks/deliveries', {
  headers: { 'Authorization': `Bearer ${apiKey}` }
});