curl --request GET \
--url https://api.gigstack.io/v2/teams/{id}/fiscal-upload-sessions/{sessionId} \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.gigstack.io/v2/teams/{id}/fiscal-upload-sessions/{sessionId}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.gigstack.io/v2/teams/{id}/fiscal-upload-sessions/{sessionId}"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"success": true,
"data": {
"id": "<string>",
"team_id": "<string>",
"team": {
"id": "<string>",
"legal_name": "<string>",
"tax_id": "<string>"
},
"can_submit": true,
"recovery_available_at": 123,
"purpose": "csd",
"status": "pending",
"credential_livemode": true,
"effect_scope": "team_shared",
"provider_environment": "production",
"created_at": 123,
"expires_at": 123,
"completed_at": 123,
"upload_url": "<string>",
"completion_url": "<string>",
"manifest_consent": {
"text": "<string>",
"version": "<string>"
},
"resolution": {
"action": "released_for_new_upload",
"resolved_at": 123
},
"result": {
"team_id": "<string>",
"effect_scope": "team_shared",
"blocking_session_id": "<string>",
"csd": {
"configured": true,
"expires_at": 123,
"serial_number": "<string>",
"provider": "<string>"
},
"fiel": {
"configured": true,
"expires_at": 123,
"serial_number": "<string>",
"rfc": "<string>"
},
"sat_download": {
"registered": true,
"registered_at": 123,
"sync_enabled": true,
"sync_start_date": "<string>"
},
"manifest": {
"completed": true,
"signed_at": 123,
"provider_status": "<string>"
}
},
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true
}
},
"timestamp": 123
}Read a fiscal upload session
Requires a verified Firebase or active signed personal MCP identity and current team owner authority. Team API keys and OAuth cannot impersonate their creator. Fiscal configuration is shared across live/test credential modes. FIEL/PFX provider calls use production even on staging; CSD affects shared future invoice configuration. The browser displays actual provider_environment and requires explicit consent.
Current owner can inspect a prior-owner session after ownership transfer. Submission remains restricted to the original creator while still owner. Read after a lost connection; never automatically resubmit.
curl --request GET \
--url https://api.gigstack.io/v2/teams/{id}/fiscal-upload-sessions/{sessionId} \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.gigstack.io/v2/teams/{id}/fiscal-upload-sessions/{sessionId}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.gigstack.io/v2/teams/{id}/fiscal-upload-sessions/{sessionId}"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"success": true,
"data": {
"id": "<string>",
"team_id": "<string>",
"team": {
"id": "<string>",
"legal_name": "<string>",
"tax_id": "<string>"
},
"can_submit": true,
"recovery_available_at": 123,
"purpose": "csd",
"status": "pending",
"credential_livemode": true,
"effect_scope": "team_shared",
"provider_environment": "production",
"created_at": 123,
"expires_at": 123,
"completed_at": 123,
"upload_url": "<string>",
"completion_url": "<string>",
"manifest_consent": {
"text": "<string>",
"version": "<string>"
},
"resolution": {
"action": "released_for_new_upload",
"resolved_at": 123
},
"result": {
"team_id": "<string>",
"effect_scope": "team_shared",
"blocking_session_id": "<string>",
"csd": {
"configured": true,
"expires_at": 123,
"serial_number": "<string>",
"provider": "<string>"
},
"fiel": {
"configured": true,
"expires_at": 123,
"serial_number": "<string>",
"rfc": "<string>"
},
"sat_download": {
"registered": true,
"registered_at": 123,
"sync_enabled": true,
"sync_start_date": "<string>"
},
"manifest": {
"completed": true,
"signed_at": 123,
"provider_status": "<string>"
}
},
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true
}
},
"timestamp": 123
}Authorizations
Authentication Method: HTTP Bearer token.
The runtime requires the literal Bearer prefix — a bare token in the
Authorization header is rejected with 401 unauthorized.
Header Format: Authorization: Bearer YOUR_API_KEY
Your API key is a JWT. Live keys operate on live data (livemode: true);
test keys operate on isolated test data (livemode: false).
Get your key at: app.gigstack.pro/settings?tab=api
Errors: credential failures are answered by the authentication layer with a raw
{ "message": … } body, not the standardized envelope — 401 for a missing, malformed or
expired token, 403 for a revoked key or a plan without API access. See the Unauthorized
and AuthForbidden responses.