🌹 Wild Rose Trucking — VTC API

Overview

The Wild Rose VTC API allows external VTC websites to:

• Authenticate users via OAuth ("Login with Wild Rose")
• Fetch user profiles, avatars, and VTC membership
• Pull trucking stats (jobs, distance, revenue, XP)
• Access company/VTC information

Base URL: https://wild-rose-gaming.com

Getting Started

1. Create an OAuth Client

Go to your Manage VTC tab and scroll to the API / OAuth section. Fill in:

• App Name — Your VTC website name (shown to users during authorization)
• Redirect URI — The exact URL on your site that handles the callback (e.g. https://yoursite.com/auth/callback)

You'll receive a client_id and client_secret. Store the secret securely — it's only shown once.

OAuth Flow

Wild Rose uses a standard OAuth 2.0 Authorization Code flow:

Step 1: Redirect User to Authorize

Send the user to the Wild Rose authorization page:

GET https://wild-rose-gaming.com/oauth/authorize
    ?client_id=YOUR_CLIENT_ID
    &redirect_uri=https://yoursite.com/auth/callback
    &state=RANDOM_STRING

The user will see a branded "Login with Wild Rose" page. If not logged in, they'll be prompted to sign in. They then approve or deny access.

Step 2: Handle the Callback

After approval, the user is redirected back to your redirect_uri with:

https://yoursite.com/auth/callback?code=AUTHORIZATION_CODE&state=YOUR_STATE

If denied:

https://yoursite.com/auth/callback?error=access_denied&state=YOUR_STATE

Step 3: Exchange Code for Access Token

Make a server-side POST request to exchange the code:

POST https://wild-rose-gaming.com/oauth/token

Content-Type: application/json

{
    "client_id": "YOUR_CLIENT_ID",
    "client_secret": "YOUR_CLIENT_SECRET",
    "code": "AUTHORIZATION_CODE",
    "redirect_uri": "https://yoursite.com/auth/callback"
}

Response:

{
    "access_token": "abc123...",
    "token_type": "Bearer",
    "expires_in": 604800,
    "user": {
        "id": 1,
        "username": "trucker_joe",
        "display_name": "Trucker Joe",
        "avatar": "https://wild-rose-gaming.com/uploads/staff/user_1_abc.jpg",
        "company_id": 1,
        "company_name": "Wild Rose Trucking",
        "company_role": "driver"
    }
}

Step 4: Use the Access Token

Include the token in subsequent API requests:

Authorization: Bearer YOUR_ACCESS_TOKEN

Tokens are valid for 7 days.

Authorization Endpoints

User Data Endpoints

{
    "id": 1,
    "username": "trucker_joe",
    "display_name": "Trucker Joe",
    "avatar": "https://wild-rose-gaming.com/uploads/staff/user_1_abc.jpg",
    "email": "joe@example.com",
    "company": {
        "id": 1,
        "name": "Wild Rose Trucking",
        "tag": "WRT",
        "color": "#FF6A2A",
        "logo": "https://wild-rose-gaming.com/uploads/trucking/co_logo_1_abc.png",
        "slug": "wild-rose-trucking"
    },
    "company_role": "driver",
    "stats": {
        "total_jobs": 142,
        "total_distance": 85420,
        "total_revenue": 4250000,
        "total_xp": 28500
    },
    "recent_jobs": [
        {
            "cargo": "Electronics",
            "source_city": "Las Vegas",
            "source_company": "Tech Corp",
            "destination_city": "Los Angeles",
            "destination_company": "Retail Hub",
            "distance": 420,
            "planned_distance": 415,
            "revenue": 32000,
            "xp": 850,
            "cargo_mass": 18500,
            "cargo_damage": 0.001,
            "truck_damage": 0.003,
            "truck": "Kenworth W900",
            "fuel_used": 145,
            "duration": 1800,
            "created_at": "2025-07-10 14:30:00"
        }
    ],
    "jobs_total": 142,
    "jobs_page": 1,
    "jobs_pages": 15,
    "company_drivers": [
        {
            "id": 1,
            "username": "trucker_joe",
            "display_name": "Trucker Joe",
            "avatar": "https://wild-rose-gaming.com/uploads/staff/user_1_abc.jpg",
            "role": "driver",
            "total_jobs": 142,
            "total_distance": 85420,
            "total_revenue": 4250000
        }
    ],
    "member_since": "2024-01-15 10:30:00"
}

{
    "ok": true,
    "drivers": [
        {
            "username": "trucker_joe",
            "display_name": "Trucker Joe",
            "avatar": "https://wild-rose-gaming.com/uploads/staff/user_1_abc.jpg",
            "speed": 88.5,
            "has_load": true,
            "cargo": "Electronics",
            "source_city": "Las Vegas",
            "destination_city": "Los Angeles",
            "game": "ats"
        }
    ]
}

{
    "driver": { "id": 1, "name": "Trucker Joe" },
    "jobs": [
        {
            "cargo": "Electronics",
            "source_city": "Las Vegas",
            "source_company": "Tech Corp",
            "destination_city": "Los Angeles",
            "destination_company": "Retail Hub",
            "distance": 420,
            "planned_distance": 415,
            "revenue": 32000,
            "xp": 850,
            "cargo_mass": 18500,
            "cargo_damage": 0.001,
            "truck_damage": 0.003,
            "truck": "Kenworth W900",
            "fuel_used": 145,
            "duration": 1800,
            "created_at": "2025-07-10 14:30:00"
        }
    ],
    "total": 142,
    "page": 1,
    "pages": 15
}

Company Data Endpoints

{
    "ok": true,
    "company": {
        "id": 1,
        "name": "Wild Rose Trucking",
        "tag": "WRT",
        "color": "#FF6A2A",
        "logo": "https://wild-rose-gaming.com/uploads/trucking/co_logo_1_abc.png",
        "slug": "wild-rose-trucking"
    },
    "stats": {
        "total_drivers": 12,
        "total_jobs": 847,
        "total_distance": 412000,
        "total_revenue": 18200000,
        "total_xp": 95000
    },
    "top_drivers": [
        {
            "id": 1,
            "username": "trucker_joe",
            "display_name": "Trucker Joe",
            "avatar": "https://wild-rose-gaming.com/uploads/staff/user_1_abc.jpg",
            "total_jobs": 142,
            "total_distance": 85420,
            "total_revenue": 4250000
        }
    ]
}

{
    "action": "get_positions",
    "api_key": "YOUR_TRUCKING_API_KEY",
    "company_id": 1
}

{
    "ok": true,
    "drivers": [
        {
            "username": "trucker_joe",
            "display_name": "Trucker Joe",
            "avatar": "/uploads/staff/user_1_abc.jpg",
            "pos_x": -95432.5,
            "pos_y": 0,
            "pos_z": 23456.7,
            "heading": 1.57,
            "speed": 88.5,
            "has_load": true,
            "cargo": "Electronics",
            "source_city": "Las Vegas",
            "destination_city": "Los Angeles",
            "game": "ats",
            "active": true
        }
    ]
}

Company Management Endpoints

These endpoints require an OAuth token from a user with owner or manager role in their company. All use ?access_token=TOKEN for authentication.

{ "ok": true }

{
    "ok": true,
    "forms": [
        { "slug": "vtc-application", "name": "VTC Application Form" }
    ]
}

{ "ok": true, "role": "manager" }

{
    "ok": true,
    "applications": [
        {
            "id": 12,
            "username": "new_driver",
            "display_name": "New Driver",
            "avatar": "https://wild-rose-gaming.com/uploads/staff/user_5_abc.jpg",
            "message": "I'd love to join your company!",
            "created_at": "2025-07-10 09:00:00"
        }
    ]
}

{ "ok": true, "status": "approved" }

{ "ok": true, "status": "declined" }

{ "ok": true }

Error Responses (Management)

Error Handling

All error responses follow this format:

{
    "error": "error_code",
    "message": "Human-readable description"
}

Cloudflare & Authorization Headers

Wild Rose Gaming sits behind Cloudflare. In some configurations, Cloudflare will strip the Authorization header from requests before they reach the origin server. This affects both server-side curl calls and client-side fetch requests.

Solution: Use the Query Parameter

All endpoints that accept Authorization: Bearer TOKEN also accept the token as a query parameter:

GET /oauth/token?action=user&access_token=YOUR_TOKEN

This bypasses the header stripping entirely. Use this method when:

• Your site is on a different server/subdomain than wild-rose-gaming.com
• You're making client-side fetch requests from the browser
• Your server-side curl calls return "Access token required" despite sending the header

When Headers Work Fine

The Authorization header works without issues when:

• Calling from localhost / 127.0.0.1 on the same server (internal calls)
• The POST /oauth/token endpoint (code exchange) — this uses Content-Type: application/json body, not auth headers

Example: Client-Side Fetch

// ❌ May fail — Cloudflare strips the header
fetch('https://wild-rose-gaming.com/oauth/token?action=user', {
    headers: { 'Authorization': 'Bearer ' + token }
});

// ✅ Always works — token in query string
fetch('https://wild-rose-gaming.com/oauth/token?action=user&access_token=' + token);

Example: Server-Side PHP

// ❌ May fail from external servers
$ch = curl_init('https://wild-rose-gaming.com/oauth/token?action=user');
curl_setopt($ch, CURLOPT_HTTPHEADER, ['Authorization: Bearer ' . $token]);

// ✅ Always works
$ch = curl_init('https://wild-rose-gaming.com/oauth/token?action=user&access_token=' . urlencode($token));

Rate Limits

Please be respectful with API usage:

• User info endpoint: max 60 requests/minute per token
• Company stats: max 30 requests/minute per client
• Live drivers: max 12 requests/minute (poll every 5 seconds)
• Driver jobs: max 30 requests/minute per token
• Token exchange: max 10 requests/minute per client

Rate Limit Response

When you exceed the limit, you'll receive a 429 Too Many Requests response:

{
    "error": "rate_limited",
    "message": "Too many requests. Please wait before trying again.",
    "retry_after": 30
}

Try It

Test the API directly from this page. Paste your access token below to make live requests.

Full Example (PHP)

Here's a complete example of implementing "Login with Wild Rose" on your VTC site:

login.php — Redirect to Wild Rose

<?php
session_start();

$clientId = 'YOUR_CLIENT_ID';
$redirectUri = 'https://yoursite.com/auth/callback.php';

// Generate random state for CSRF protection
$state = bin2hex(random_bytes(16));
$_SESSION['oauth_state'] = $state;

// Redirect to Wild Rose
$url = 'https://wild-rose-gaming.com/oauth/authorize?' . http_build_query([
    'client_id' => $clientId,
    'redirect_uri' => $redirectUri,
    'state' => $state,
]);

header('Location: ' . $url);
exit;

callback.php — Handle the response

<?php
session_start();

$clientId = 'YOUR_CLIENT_ID';
$clientSecret = 'YOUR_CLIENT_SECRET';
$redirectUri = 'https://yoursite.com/auth/callback.php';

// Verify state
if (($_GET['state'] ?? '') !== ($_SESSION['oauth_state'] ?? '')) {
    die('Invalid state — possible CSRF attack');
}
unset($_SESSION['oauth_state']);

// Check for errors
if (isset($_GET['error'])) {
    die('Authorization denied: ' . htmlspecialchars($_GET['error']));
}

// Exchange code for token
$code = $_GET['code'] ?? '';
$response = file_get_contents('https://wild-rose-gaming.com/oauth/token', false,
    stream_context_create([
        'http' => [
            'method' => 'POST',
            'header' => 'Content-Type: application/json',
            'content' => json_encode([
                'client_id' => $clientId,
                'client_secret' => $clientSecret,
                'code' => $code,
                'redirect_uri' => $redirectUri,
            ]),
        ],
    ])
);

$data = json_decode($response, true);

if (!isset($data['access_token'])) {
    die('Token exchange failed: ' . ($data['message'] ?? 'Unknown error'));
}

// Store in session
$_SESSION['access_token'] = $data['access_token'];
$_SESSION['user'] = $data['user'];

header('Location: /dashboard');
exit;

Fetching user data later

<?php
session_start();

$token = $_SESSION['access_token'] ?? '';
if (!$token) { header('Location: /login.php'); exit; }

// Use access_token query param (Cloudflare strips Authorization headers)
$response = file_get_contents(
    'https://wild-rose-gaming.com/oauth/token?action=user&access_token=' . urlencode($token)
);

$user = json_decode($response, true);

echo 'Welcome, ' . htmlspecialchars($user['display_name']);
echo '<br>Total distance: ' . number_format($user['stats']['total_distance']) . ' km';
echo '<br>Company: ' . htmlspecialchars($user['company']['name'] ?? 'None');

Fetching company stats (no user login needed)

<?php
// Public company stats using client credentials
$response = file_get_contents(
    'https://wild-rose-gaming.com/oauth/token?action=company_stats'
    . '&client_id=' . urlencode($clientId)
    . '&client_secret=' . urlencode($clientSecret)
);

$data = json_decode($response, true);

if ($data['ok']) {
    echo $data['company']['name'] . ' — ' . $data['stats']['total_drivers'] . ' drivers';
    echo '<br>' . number_format($data['stats']['total_jobs']) . ' deliveries';
    echo '<br>' . number_format($data['stats']['total_distance']) . ' km driven';
}

Changelog

Machine-Readable Docs (for AI / curl)

Need a quick summary an LLM or script can parse? Hit the plaintext endpoint:

curl https://api.wild-rose-gaming.com/api.txt

Live Map Embed

Embed the Wild Rose live map directly on your VTC site using an iframe. Authenticates with your client_id — no user token needed.

Usage

<iframe
    src="https://wild-rose-gaming.com/livemap?embed&client_id=YOUR_CLIENT_ID"
    style="width:100%;height:600px;border:none;border-radius:12px;"
    allow="fullscreen"
></iframe>

Full-Page Example

<!-- Full-height map page -->
<div style="position:fixed;inset:0;">
    <iframe
        src="https://wild-rose-gaming.com/livemap?embed&client_id=YOUR_CLIENT_ID"
        style="width:100%;height:100%;border:none;"
        allow="fullscreen"
    ></iframe>
</div>

Support

Having issues with the API? Reach out on our Discord server.