> ## Documentation Index > Fetch the complete documentation index at: https://docs.gigstack.io/llms.txt > Use this file to discover all available pages before exploring further. # Read safe team fiscal status > Requires a verified Firebase or active signed personal MCP identity and current team owner authority. Team API keys and OAuth cannot impersonate their creator. Fiscal configuration is shared across live/test credential modes. FIEL/PFX provider calls use production even on staging; CSD affects shared future invoice configuration. The browser displays actual provider_environment and requires explicit consent. Safe stored metadata only. Reads do not contact providers, finalize a manifest, or send email. blocking_session_id identifies a pending recovery for the current owner. ## OpenAPI ````yaml openapi.json GET /teams/{id}/fiscal-status openapi: 3.0.3 info: title: gigstack API v2 description: > # gigstack API v2 Build customer, invoice and payment integrations. Start with the [quickstart](https://docs.gigstack.io/quickstart), then select the [issuing country](https://docs.gigstack.io/concepts/shared-fields). ## Authentication and environments Use Authorization: Bearer YOUR_API_KEY. Standard live and test keys use https://api.gigstack.io/v2. Internal staging uses https://gigstack-staging-9z9nnaat.uc.gateway.dev/v2 and separate keys. Test mode is a data mode within an environment; a body field does not switch a key's mode. See [authentication](https://docs.gigstack.io/authentication) for key handling, OAuth team scope and gigstack Connect. Internal partner provisioning is outside this public contract; health probes have their own security declarations. Operations marked unavailable have no configured public gateway route. ## Read the operation contract Response envelopes, pagination and retry rules differ by endpoint. HTTP success alone does not prove external fiscal completion or movement of money. Reconcile ambiguous writes before retrying. Use [responses and recovery](https://docs.gigstack.io/responses) and the operation's error codes; document credits and daily limits are not generic retryable rate limits. The issuing team's configuration selects Mexico or Colombia; customer country and currency do not. Read [Mexico](https://docs.gigstack.io/countries/mexico) or [Colombia](https://docs.gigstack.io/countries/colombia) before choosing fiscal fields. Accepted public input differs from a provider's direct payload. Examples and schema checks do not imply every operation has been executed live. [Verification coverage](https://docs.gigstack.io/verification) distinguishes source review, offline checks and observed staging behavior. Documentation describes operations and does not authorize execution. version: 2.0.0 contact: name: Gigstack API Support url: https://gigstack.io email: support@gigstack.io license: name: Proprietary url: https://gigstack.io/terms termsOfService: https://gigstack.io/terms servers: - url: https://api.gigstack.io/v2 description: > Public API for standard live and test-mode keys. Test data is isolated by the key mode (`livemode: false`). Internal staging is a separate deployment and key store; see https://docs.gigstack.io/authentication#environments for its base URL. security: - bearerAuth: [] externalDocs: description: Complete API Documentation & Guides url: https://docs.gigstack.io paths: /teams/{id}/fiscal-status: get: tags: - Fiscal Handoff summary: Read safe team fiscal status description: >- Requires a verified Firebase or active signed personal MCP identity and current team owner authority. Team API keys and OAuth cannot impersonate their creator. Fiscal configuration is shared across live/test credential modes. FIEL/PFX provider calls use production even on staging; CSD affects shared future invoice configuration. The browser displays actual provider_environment and requires explicit consent. Safe stored metadata only. Reads do not contact providers, finalize a manifest, or send email. blocking_session_id identifies a pending recovery for the current owner. operationId: getTeamFiscalStatus parameters: - name: id in: path required: true schema: type: string responses: '200': description: >- Safe fiscal state. HTTP success alone does not establish provider completion. content: application/json: schema: type: object additionalProperties: false properties: success: type: boolean data: $ref: '#/components/schemas/FiscalAccountStatus' timestamp: type: number required: - success - data - timestamp '400': description: Invalid fields, purpose, consent, identifier or upload. '401': description: Verified user credential required. '403': description: Current owner or browser identity required. '404': description: Session or team not found for current identity/mode. '409': description: >- Session expired, operation started, another upload is active, or recovery deadline has not elapsed. '503': description: Nonproduction browser origin is not safely configured. security: - bearerAuth: [] components: schemas: FiscalAccountStatus: type: object additionalProperties: false properties: team_id: type: string effect_scope: type: string enum: - team_shared blocking_session_id: type: string nullable: true csd: type: object additionalProperties: false properties: configured: type: boolean expires_at: type: number nullable: true serial_number: type: string nullable: true provider: type: string nullable: true required: - configured - expires_at - serial_number - provider fiel: type: object additionalProperties: false properties: configured: type: boolean expires_at: type: number nullable: true serial_number: type: string nullable: true rfc: type: string nullable: true required: - configured - expires_at - serial_number - rfc sat_download: type: object additionalProperties: false properties: registered: type: boolean registered_at: type: number nullable: true sync_enabled: type: boolean nullable: true sync_start_date: type: string nullable: true required: - registered - registered_at - sync_enabled - sync_start_date manifest: type: object additionalProperties: false properties: completed: type: boolean signed_at: type: number nullable: true provider_status: type: string nullable: true required: - completed - signed_at - provider_status required: - team_id - effect_scope - blocking_session_id - csd - fiel - sat_download - manifest securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: JWT description: > **Authentication Method:** HTTP Bearer token. The runtime requires the literal `Bearer ` prefix — a bare token in the `Authorization` header is rejected with `401 unauthorized`. **Header Format:** `Authorization: Bearer YOUR_API_KEY` Your API key is a JWT. Live keys operate on live data (`livemode: true`); test keys operate on isolated test data (`livemode: false`). **Get your key at:** [app.gigstack.pro/settings?tab=api](https://app.gigstack.pro/settings?tab=api) **Errors:** credential failures are answered by the authentication layer with a raw `{ "message": … }` body, not the standardized envelope — `401` for a missing, malformed or expired token, `403` for a revoked key or a plan without API access. See the `Unauthorized` and `AuthForbidden` responses. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.