Carrier-Connect Partner API

Carrier-Connect is a load board. It connects shippers and brokers with carriers that went through a verification process: operating authority checked against FMCSA, insurance on file, identity checked through Motus, and a manual review of the full document package by our team.

Carrier-Connect does not process freight payments. Prices you send are informational, and payment terms stay between you and the carrier.

Base URL: https://www.carrier-connect.center/api/v1. All requests and responses are JSON. Request bodies use camelCase field names; responses use snake_case.

Send your API key in the Authorization header as a Bearer token. Keys are issued by Carrier-Connect; contact us to get one.

Authorization: Bearer cc_live_...

Keys starting with cc_test_ use the sandbox: the same URLs return realistic sample responses, and nothing touches real loads or carriers. Build and test your integration there first, then switch to a cc_live_ key.

Each key has scopes. A request without the required scope returns 403.

1. Post a load with POST /loads. Use priceType: "offers" to receive carrier prices, and optionally minAllInPrice / maxAllInPrice for your range.
2. Receive load_offer.created on your webhook each time a carrier sends an offer, or poll GET /loads/{id}/offers. Carriers on your Do-Not-Use list can't send offers.
3. Check the carrier with GET /carriers/{id}, using the carrier_id from the offer, and run your own compliance checks.
4. Award the load with POST /loads/{id}/assign. This generates the Rate Confirmation for the carrier to sign.
5. If the carrier fails your checks after the award, call POST /loads/{id}/reject with a reason code. The load reopens right away and the other valid offers stay available.

Paths are relative to the base URL. The OpenAPI spec has every field, status code and response shape; you can import it into Postman, Insomnia or Swagger.

Reason codes for POST /loads/{id}/reject: CARRIER_NOT_FOUND, IDENTITY_MISMATCH, DO_NOT_USE, LANE_RESTRICTION, INSURANCE_FAIL, AUTHORITY_FAIL, SAFETY_FAIL, DUPLICATE_AWARD, STALE_POSTING, SYSTEM_ERROR.

Post a load that accepts carrier offers:

curl -X POST https://www.carrier-connect.center/api/v1/loads \
  -H "Authorization: Bearer cc_test_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "title": "2 sedans, Miami FL to Atlanta GA",
    "originCity": "Miami",
    "originState": "FL",
    "destinationCity": "Atlanta",
    "destinationState": "GA",
    "pickupWindowStart": "2026-10-02",
    "priceType": "offers",
    "maxAllInPrice": 1600
  }'

Award the load to the carrier from an offer:

curl -X POST https://www.carrier-connect.center/api/v1/loads/LOAD_ID/assign \
  -H "Authorization: Bearer cc_test_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "carrierId": "CARRIER_ID_FROM_THE_OFFER",
    "agreedPrice": 1400,
    "pickupLocationName": "Miami Auto Auction",
    "pickupAddress": "1234 NW 36th St, Miami, FL 33142",
    "deliveryLocationName": "Atlanta Dealer Lot",
    "deliveryAddress": "500 Peachtree Industrial Blvd, Atlanta, GA 30341"
  }'

Check a carrier's verification by MC number:

curl "https://www.carrier-connect.center/api/v1/carriers?mc=765432" \
  -H "Authorization: Bearer cc_test_YOUR_KEY"

{
  "data": [
    {
      "id": "4f1c…",
      "company_name": "Acme Transport LLC",
      "usdot_number": "1234567",
      "mc_number": "765432",
      "verification": {
        "overall": "verified",
        "authority": { "status": "verified", "fmcsa_status": "ACTIVE", "last_checked_at": "2026-09-20T14:02:11Z" },
        "insurance": { "status": "verified", "expires_at": "2027-06-30" },
        "motus": { "status": "verified", "motus_status": "PASS", "last_checked_at": "2026-09-20T14:02:15Z" }
      }
    }
  ]
}

verification.overall is verified only after our team approved the carrier's full document package. It changes to expired automatically when a required document, such as insurance, expires.

We send a POST with a JSON body to the URL registered for your account whenever something happens to one of your loads. Webhook URLs and signing secrets are set up by Carrier-Connect together with your API key.

The body is the load, or for load_offer.created the offer with its carrier. Every delivery includes these headers:

Verify the v2 signature against the raw body and reject deliveries older than 5 minutes. Example in Node.js:

import { createHmac, timingSafeEqual } from "node:crypto";

// rawBody must be the exact request body string, before JSON.parse.
export function isValidCarrierConnectWebhook(rawBody, headers, secret) {
  const timestamp = headers["x-carrier-connect-timestamp"];
  const signature = headers["x-carrier-connect-signature-v2"];
  if (!timestamp || !signature) return false;

  // Reject old deliveries so a captured request can't be replayed.
  const age = Math.abs(Date.now() / 1000 - Number(timestamp));
  if (!Number.isFinite(age) || age > 300) return false;

  const expected = createHmac("sha256", secret)
    .update(`${timestamp}.${rawBody}`)
    .digest("hex");

  const a = Buffer.from(expected, "hex");
  const b = Buffer.from(signature, "hex");
  return a.length === b.length && timingSafeEqual(a, b);
}

Respond with any 2xx status within 8 seconds. If your endpoint fails or times out, we retry up to 7 more times over about 24 hours, with increasing waits. Redirects are not followed, so register the final URL.

Every error has the same shape:

{ "error": { "message": "This load can no longer be edited (a carrier is already assigned)." } }

Each key can make 60 requests per minute and 10,000 per day. If your integration needs more, contact us and we can raise the limit for your key.