Connect your systems.
Coordinate your response.

# Set PETROSUPPORT_BASE_URL, PETROSUPPORT_TOKEN and PETROSUPPORT_IDEMPOTENCY_KEY.
# The base URL includes /api/partner/v1. Use a fresh key for each new operation.
curl --fail-with-body --max-time 20 \
  "$PETROSUPPORT_BASE_URL/incidents" \
  -H "Authorization: Bearer $PETROSUPPORT_TOKEN" \
  -H "Idempotency-Key: $PETROSUPPORT_IDEMPOTENCY_KEY" \
  -H 'Content-Type: application/json' \
  --data-binary '{"title":"Fleet roadside incident","priority":"high","requested_by":"11111111-1111-4111-a111-111111111111","latitude":-1.292100000000000026290081223123706877231597900390625,"longitude":36.821899999999999408828443847596645355224609375,"services":["recovery"],"external_reference":"FLEET-INC-001"}'

<?php // PHP 8+ with the cURL extension; run on your server.
$base = rtrim(getenv('PETROSUPPORT_BASE_URL'), '/');
$body = '{"title":"Fleet roadside incident","priority":"high","requested_by":"11111111-1111-4111-a111-111111111111","latitude":-1.292100000000000026290081223123706877231597900390625,"longitude":36.821899999999999408828443847596645355224609375,"services":["recovery"],"external_reference":"FLEET-INC-001"}'; // Persist these exact bytes and key for retries.
$ch = curl_init($base . '/incidents');
curl_setopt_array($ch, [CURLOPT_POST => true, CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CONNECTTIMEOUT => 5, CURLOPT_TIMEOUT => 20,
    CURLOPT_HTTPHEADER => ['Content-Type: application/json',
        'Authorization: Bearer ' . getenv('PETROSUPPORT_TOKEN'),
        'Idempotency-Key: ' . getenv('PETROSUPPORT_IDEMPOTENCY_KEY')],
    CURLOPT_POSTFIELDS => $body]);
$response = curl_exec($ch);
if ($response === false) { throw new RuntimeException('Transport failed; reconcile before retrying.'); }
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
if ($status >= 300) { throw new RuntimeException("API returned HTTP $status: $response"); }
echo $response;

# Ruby 3+; standard library only.
require 'net/http'
require 'uri'
base = ENV.fetch('PETROSUPPORT_BASE_URL').sub(%r{/$}, '')
uri = URI("#{base}/incidents")
request = Net::HTTP::Post.new(uri)
request['Authorization'] = "Bearer #{ENV.fetch('PETROSUPPORT_TOKEN')}"
request['Content-Type'] = 'application/json'
request['Idempotency-Key'] = ENV.fetch('PETROSUPPORT_IDEMPOTENCY_KEY')
request.body = '{"title":"Fleet roadside incident","priority":"high","requested_by":"11111111-1111-4111-a111-111111111111","latitude":-1.292100000000000026290081223123706877231597900390625,"longitude":36.821899999999999408828443847596645355224609375,"services":["recovery"],"external_reference":"FLEET-INC-001"}'
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == 'https'
http.open_timeout = 5
http.read_timeout = 20
response = http.request(request)
raise "HTTP #{response.code}: #{response.body}" unless response.is_a?(Net::HTTPSuccess)
puts response.body

// Go 1.20+; standard library only.
package main
import (
    "fmt"
    "io"
    "net/http"
    "os"
    "strings"
    "time"
)
func main() {
    body := `{"title":"Fleet roadside incident","priority":"high","requested_by":"11111111-1111-4111-a111-111111111111","latitude":-1.292100000000000026290081223123706877231597900390625,"longitude":36.821899999999999408828443847596645355224609375,"services":["recovery"],"external_reference":"FLEET-INC-001"}`
    url := strings.TrimRight(os.Getenv("PETROSUPPORT_BASE_URL"), "/") + "/incidents"
    req, err := http.NewRequest("POST", url, strings.NewReader(body))
    if err != nil { panic(err) }
    req.Header.Set("Authorization", "Bearer " + os.Getenv("PETROSUPPORT_TOKEN"))
    req.Header.Set("Content-Type", "application/json")
    req.Header.Set("Idempotency-Key", os.Getenv("PETROSUPPORT_IDEMPOTENCY_KEY"))
    client := &http.Client{Timeout: 20 * time.Second,
        CheckRedirect: func(*http.Request, []*http.Request) error { return http.ErrUseLastResponse }}
    res, err := client.Do(req)
    if err != nil { panic("Transport failed; reconcile before retrying") }
    defer res.Body.Close()
    data, err := io.ReadAll(res.Body)
    if err != nil { panic(err) }
    if res.StatusCode >= 300 { panic(fmt.Sprintf("HTTP %d: %s", res.StatusCode, data)) }
    fmt.Println(string(data))
}

// Node.js 20+ server-side JavaScript. Never expose the bearer credential in a browser.
const base = process.env.PETROSUPPORT_BASE_URL.replace(/\/$/, '');
const body = '{"title":"Fleet roadside incident","priority":"high","requested_by":"11111111-1111-4111-a111-111111111111","latitude":-1.292100000000000026290081223123706877231597900390625,"longitude":36.821899999999999408828443847596645355224609375,"services":["recovery"],"external_reference":"FLEET-INC-001"}';
const response = await fetch(`${base}/incidents`, {
  method: 'POST', redirect: 'error', signal: AbortSignal.timeout(20000),
  headers: {
    Authorization: `Bearer ${process.env.PETROSUPPORT_TOKEN}`,
    'Content-Type': 'application/json',
    'Idempotency-Key': process.env.PETROSUPPORT_IDEMPOTENCY_KEY
  },
  body
});
const result = await response.json();
if (!response.ok) throw new Error(`HTTP ${response.status}: ${JSON.stringify(result)}`);
console.log(result);

# Python 3.10+; standard library only.
import os
import urllib.request
import urllib.error
base = os.environ['PETROSUPPORT_BASE_URL'].rstrip('/')
body = b'{"title":"Fleet roadside incident","priority":"high","requested_by":"11111111-1111-4111-a111-111111111111","latitude":-1.292100000000000026290081223123706877231597900390625,"longitude":36.821899999999999408828443847596645355224609375,"services":["recovery"],"external_reference":"FLEET-INC-001"}'
request = urllib.request.Request(base + '/incidents', data=body, method='POST', headers={
    'Authorization': 'Bearer ' + os.environ['PETROSUPPORT_TOKEN'],
    'Content-Type': 'application/json',
    'Idempotency-Key': os.environ['PETROSUPPORT_IDEMPOTENCY_KEY'],
})
class NoRedirect(urllib.request.HTTPRedirectHandler):
    def redirect_request(self, req, fp, code, msg, headers, newurl):
        return None
opener = urllib.request.build_opener(NoRedirect)
try:
    with opener.open(request, timeout=20) as response:
        print(response.read().decode())
except urllib.error.HTTPError as error:
    raise RuntimeError(f'HTTP {error.code}: {error.read().decode()}') from error

Authorization: Bearer YOUR_CREDENTIAL
Accept: application/json
Content-Type: application/json
Idempotency-Key: your-persisted-operation-id

{
  "incident_id": "22222222-2222-4222-a222-222222222222",
  "task_id": "33333333-3333-4333-a333-333333333333",
  "status": "accepted"
}

{
  "first_name": "Test",
  "last_name": "Driver",
  "email": "driver42@example.com",
  "phone": "+254700000042",
  "status": "active"
}

X-PetroSupport-Event-ID: <event UUID>
X-PetroSupport-Delivery-ID: <delivery UUID>
X-PetroSupport-Timestamp: <Unix seconds>
X-PetroSupport-Signature: v1=<hex digest>

signed_message = timestamp + "." + raw_body
digest = HMAC_SHA256(signing_secret, signed_message)