curl --request GET \
--url https://api.gigstack.io/v2/teams/{id}/webhook-deliveries \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.gigstack.io/v2/teams/{id}/webhook-deliveries', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.gigstack.io/v2/teams/{id}/webhook-deliveries"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"success": true,
"data": [
{
"id": "log_example",
"timestamp": 1700000000000,
"updated_at": null,
"webhook_id": "wh_example",
"event": "invoice.created",
"livemode": false,
"status": "pending",
"response_code": null,
"retry_requested": false,
"redaction": "metadata_and_body_shape",
"resource_id": null,
"attempts": null,
"latency_ms": null,
"error_category": null
}
],
"has_more": false,
"next_cursor": null,
"scanned_count": 1,
"livemode": false
}List webhook delivery logs
Read retained logs for the authorized target team and credential mode. Firebase/MCP callers need current viewer-or-higher access; team API/OAuth credentials remain subject to target/sibling-team authorization. Signed API, MCP and OAuth credentials keep their issued mode. Output excludes raw bodies, headers, credentials, signed URLs and arbitrary provider text. This is a metadata/structure view, not a complete original-payload export. A filtered page can be empty while has_more is true. Continue with next_cursor until null; cursor includes timestamp and ID so deleting the anchor does not restart pagination. Unsupported stored cursor timestamps return log_pagination_unavailable rather than falsely claiming the history ended. These are the customer-visible logs records, not internal delivery-attempt IDs. pending does not mean delivered; retry_requested is only a request flag. Rows without a provable matching payload mode are excluded. This route never sends or retries a webhook. Retrying means another delivery attempt may run; it is not a terminal failure. resource_id is a historical selection hint, and every resource action checks current access. Attempts and latency can be null for older records. Receiver text and destination URLs are never returned. The browser may supply livemode only with an independently reverified Firebase ID token; the selector must equal the authenticated request mode. Signed API, MCP and OAuth credentials cannot use this selector, even to repeat their own mode.
curl --request GET \
--url https://api.gigstack.io/v2/teams/{id}/webhook-deliveries \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.gigstack.io/v2/teams/{id}/webhook-deliveries', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.gigstack.io/v2/teams/{id}/webhook-deliveries"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"success": true,
"data": [
{
"id": "log_example",
"timestamp": 1700000000000,
"updated_at": null,
"webhook_id": "wh_example",
"event": "invoice.created",
"livemode": false,
"status": "pending",
"response_code": null,
"retry_requested": false,
"redaction": "metadata_and_body_shape",
"resource_id": null,
"attempts": null,
"latency_ms": null,
"error_category": null
}
],
"has_more": false,
"next_cursor": null,
"scanned_count": 1,
"livemode": false
}Authorizations
Authentication Method: HTTP Bearer token.
The runtime requires the literal Bearer prefix — a bare token in the
Authorization header is rejected with 401 unauthorized.
Header Format: Authorization: Bearer YOUR_API_KEY
Your API key is a JWT. Live keys operate on live data (livemode: true);
test keys operate on isolated test data (livemode: false).
Get your key at: app.gigstack.pro/settings?tab=api
Errors: credential failures are answered by the authentication layer with a raw
{ "message": … } body, not the standardized envelope — 401 for a missing, malformed or
expired token, 403 for a revoked key or a plan without API access. See the Unauthorized
and AuthForbidden responses.
Path Parameters
^[A-Za-z0-9_-]{1,160}$Query Parameters
gigstack Connect: Target team ID for multi-team access.
Requires gigstack Connect enabled on your team and shared billing account.
Also requires the multipleIssuerAccounts feature on your plan. Requests targeting a
team other than the one your API key belongs to return 403 without it.
Only API keys can use it: an OAuth access token sent with another team's id is rejected with
403 Team mismatch with OAuth token.
Optional — omit it entirely unless you are acting on another team. It deliberately
carries no example value so generated snippets do not emit ?team=undefined; when the
parameter is absent, the team is derived from your API key.
Example: ?team=team_xyz789
Maximum rows scanned, not number of matching results.
1 <= x <= 100Use next_cursor with the same team, credential mode and all filters, including limit.
Inclusive epoch milliseconds.
x >= 0Inclusive epoch milliseconds.
x >= 0Result filter applied within each bounded scan.
pending, processing, retrying, succeeded, failed, unknown Webhook event name, for example invoice.created.
payment.created, payment.updated, payment.succeeded, payment.canceled, payment.deleted, payment.upcoming_due_date, invoice.created, invoice.canceled, invoice.failed, invoice_batch.completed, receipt.created, receipt.updated, receipt.completed, receipt.deleted, customer.created, customer.updated, customer.deleted, service.created, service.updated, service.deleted, sat.invoice.synced, teams.created, teams.sat.completed, teams.stripe.completed, teams.openpay.completed, teams.sat.manifest.signed Firebase browser transport only: select live (true) or test (false) history. The original Firebase token is reverified, including revocation, and the selected mode must match its authenticated request context. Omit for API, MCP and OAuth credentials; they use their issued mode.