> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gigstack.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Read a fiscal upload session

> Requires a verified Firebase or active signed personal MCP identity and current team owner authority. Team API keys and OAuth cannot impersonate their creator. Fiscal configuration is shared across live/test credential modes. FIEL/PFX provider calls use production even on staging; CSD affects shared future invoice configuration. The browser displays actual provider_environment and requires explicit consent.

Current owner can inspect a prior-owner session after ownership transfer. Submission remains restricted to the original creator while still owner. Read after a lost connection; never automatically resubmit.



## OpenAPI

````yaml openapi.json GET /teams/{id}/fiscal-upload-sessions/{sessionId}
openapi: 3.0.3
info:
  title: gigstack API v2
  description: >
    # gigstack API v2


    Build customer, invoice and payment integrations. Start with the
    [quickstart](https://docs.gigstack.io/quickstart), then select the [issuing
    country](https://docs.gigstack.io/concepts/shared-fields).


    ## Authentication and environments


    Use Authorization: Bearer YOUR_API_KEY. Standard live and test keys use
    https://api.gigstack.io/v2. Internal staging uses
    https://gigstack-staging-9z9nnaat.uc.gateway.dev/v2 and separate keys. Test
    mode is a data mode within an environment; a body field does not switch a
    key's mode.


    See [authentication](https://docs.gigstack.io/authentication) for key
    handling, OAuth team scope and gigstack Connect. Internal partner
    provisioning is outside this public contract; health probes have their own
    security declarations. Operations marked unavailable have no configured
    public gateway route.


    ## Read the operation contract


    Response envelopes, pagination and retry rules differ by endpoint. HTTP
    success alone does not prove external fiscal completion or movement of
    money. Reconcile ambiguous writes before retrying. Use [responses and
    recovery](https://docs.gigstack.io/responses) and the operation's error
    codes; document credits and daily limits are not generic retryable rate
    limits.


    The issuing team's configuration selects Mexico or Colombia; customer
    country and currency do not. Read
    [Mexico](https://docs.gigstack.io/countries/mexico) or
    [Colombia](https://docs.gigstack.io/countries/colombia) before choosing
    fiscal fields. Accepted public input differs from a provider's direct
    payload.


    Examples and schema checks do not imply every operation has been executed
    live. [Verification coverage](https://docs.gigstack.io/verification)
    distinguishes source review, offline checks and observed staging behavior.
    Documentation describes operations and does not authorize execution.
  version: 2.0.0
  contact:
    name: Gigstack API Support
    url: https://gigstack.io
    email: support@gigstack.io
  license:
    name: Proprietary
    url: https://gigstack.io/terms
  termsOfService: https://gigstack.io/terms
servers:
  - url: https://api.gigstack.io/v2
    description: >
      Public API for standard live and test-mode keys. Test data is isolated by
      the key mode

      (`livemode: false`). Internal staging is a separate deployment and key
      store; see

      https://docs.gigstack.io/authentication#environments for its base URL.
security:
  - bearerAuth: []
externalDocs:
  description: Complete API Documentation & Guides
  url: https://docs.gigstack.io
paths:
  /teams/{id}/fiscal-upload-sessions/{sessionId}:
    get:
      tags:
        - Fiscal Handoff
      summary: Read a fiscal upload session
      description: >-
        Requires a verified Firebase or active signed personal MCP identity and
        current team owner authority. Team API keys and OAuth cannot impersonate
        their creator. Fiscal configuration is shared across live/test
        credential modes. FIEL/PFX provider calls use production even on
        staging; CSD affects shared future invoice configuration. The browser
        displays actual provider_environment and requires explicit consent.


        Current owner can inspect a prior-owner session after ownership
        transfer. Submission remains restricted to the original creator while
        still owner. Read after a lost connection; never automatically resubmit.
      operationId: getFiscalUploadSession
      parameters:
        - name: id
          in: path
          required: true
          schema:
            type: string
        - name: sessionId
          in: path
          required: true
          schema:
            type: string
      responses:
        '200':
          description: >-
            Safe fiscal state. HTTP success alone does not establish provider
            completion.
          content:
            application/json:
              schema:
                type: object
                additionalProperties: false
                properties:
                  success:
                    type: boolean
                  data:
                    $ref: '#/components/schemas/FiscalUploadSession'
                  timestamp:
                    type: number
                required:
                  - success
                  - data
                  - timestamp
        '400':
          description: Invalid fields, purpose, consent, identifier or upload.
        '401':
          description: Verified user credential required.
        '403':
          description: Current owner or browser identity required.
        '404':
          description: Session or team not found for current identity/mode.
        '409':
          description: >-
            Session expired, operation started, another upload is active, or
            recovery deadline has not elapsed.
        '503':
          description: Nonproduction browser origin is not safely configured.
      security:
        - bearerAuth: []
components:
  schemas:
    FiscalUploadSession:
      type: object
      additionalProperties: false
      properties:
        id:
          type: string
        team_id:
          type: string
        team:
          type: object
          additionalProperties: false
          properties:
            id:
              type: string
            legal_name:
              type: string
              nullable: true
            tax_id:
              type: string
          required:
            - id
            - legal_name
            - tax_id
        can_submit:
          type: boolean
        recovery_available_at:
          type: number
          nullable: true
        purpose:
          type: string
          enum:
            - csd
            - fiel
            - pfx
            - manifest
        status:
          type: string
          enum:
            - pending
            - processing
            - completed
            - failed
            - outcome_unknown
            - cancelled
            - expired
        credential_livemode:
          type: boolean
        effect_scope:
          type: string
          enum:
            - team_shared
        provider_environment:
          type: string
          enum:
            - production
            - sandbox
        created_at:
          type: number
        expires_at:
          type: number
        completed_at:
          type: number
          nullable: true
        upload_url:
          type: string
          format: uri
        completion_url:
          type: string
          format: uri
        manifest_consent:
          type: object
          additionalProperties: false
          properties:
            text:
              type: string
            version:
              type: string
          required:
            - text
            - version
          nullable: true
        resolution:
          type: object
          additionalProperties: false
          properties:
            action:
              type: string
              enum:
                - released_for_new_upload
            resolved_at:
              type: number
          required:
            - action
            - resolved_at
          nullable: true
        result:
          type: object
          additionalProperties: false
          properties:
            team_id:
              type: string
            effect_scope:
              type: string
              enum:
                - team_shared
            blocking_session_id:
              type: string
              nullable: true
            csd:
              type: object
              additionalProperties: false
              properties:
                configured:
                  type: boolean
                expires_at:
                  type: number
                  nullable: true
                serial_number:
                  type: string
                  nullable: true
                provider:
                  type: string
                  nullable: true
              required:
                - configured
                - expires_at
                - serial_number
                - provider
            fiel:
              type: object
              additionalProperties: false
              properties:
                configured:
                  type: boolean
                expires_at:
                  type: number
                  nullable: true
                serial_number:
                  type: string
                  nullable: true
                rfc:
                  type: string
                  nullable: true
              required:
                - configured
                - expires_at
                - serial_number
                - rfc
            sat_download:
              type: object
              additionalProperties: false
              properties:
                registered:
                  type: boolean
                registered_at:
                  type: number
                  nullable: true
                sync_enabled:
                  type: boolean
                  nullable: true
                sync_start_date:
                  type: string
                  nullable: true
              required:
                - registered
                - registered_at
                - sync_enabled
                - sync_start_date
            manifest:
              type: object
              additionalProperties: false
              properties:
                completed:
                  type: boolean
                signed_at:
                  type: number
                  nullable: true
                provider_status:
                  type: string
                  nullable: true
              required:
                - completed
                - signed_at
                - provider_status
          required:
            - team_id
            - effect_scope
            - blocking_session_id
            - csd
            - fiel
            - sat_download
            - manifest
          nullable: true
        error:
          type: object
          additionalProperties: false
          properties:
            code:
              type: string
            message:
              type: string
            retryable:
              type: boolean
          required:
            - code
            - message
            - retryable
          nullable: true
      required:
        - id
        - team_id
        - team
        - can_submit
        - recovery_available_at
        - purpose
        - status
        - credential_livemode
        - effect_scope
        - provider_environment
        - created_at
        - expires_at
        - completed_at
        - upload_url
        - completion_url
        - manifest_consent
        - resolution
        - result
        - error
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >
        **Authentication Method:** HTTP Bearer token.


        The runtime requires the literal `Bearer ` prefix — a bare token in the

        `Authorization` header is rejected with `401 unauthorized`.


        **Header Format:** `Authorization: Bearer YOUR_API_KEY`


        Your API key is a JWT. Live keys operate on live data (`livemode:
        true`);

        test keys operate on isolated test data (`livemode: false`).


        **Get your key at:**
        [app.gigstack.pro/settings?tab=api](https://app.gigstack.pro/settings?tab=api)


        **Errors:** credential failures are answered by the authentication layer
        with a raw

        `{ "message": … }` body, not the standardized envelope — `401` for a
        missing, malformed or

        expired token, `403` for a revoked key or a plan without API access. See
        the `Unauthorized`

        and `AuthForbidden` responses.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.