Track ocean container milestones and subscribe to push events using the Maersk Track and Trace Plus API

Steps

1. Register on the Maersk Developer Portal at developer.maersk.com, create an application, and obtain Consumer Key and Consumer Secret credentials.
2. Call the Maersk OAuth token endpoint with your credentials to obtain a bearer token; include it as Authorization: Bearer YOUR_TOKEN on all subsequent API calls.
3. Query container milestones by container number or bill of lading number using the Track and Trace Plus endpoint; parse the events array for milestone codes, timestamps, location, and vessel details.
4. Create a subscription by POSTing a webhook callback URI to the Track and Trace subscription endpoint; optionally provide a secret token — Maersk will include an X-Maersk-Signature-256 HMAC-SHA256 header on every callback payload.
5. Receive POST callbacks on your endpoint for each new event; verify the HMAC signature using your stored secret before processing the payload.
6. If your webhook endpoint returns a non-2xx status, Maersk retries up to five times with exponential back-off starting at 5 minutes; if all retries fail, the subscription is marked stale and must be manually reactivated.